- Help for Users Impacted by Infected Extensions
If 'User-Agent Switcher', 'Nano Adblocker', or 'Nano Defender' sound familiar to you, I might have some bad news. A malware operator I am investigating has escalated their operations and infected 350k+ users; here's what happened and what to do if you were one of them. Read more
- Email Fraud or Email Compromise: A Beginner's Guide
A student-friendly post about email, collecting evidence, forming hypotheses, and responding to a real-world incident with imperfect information. Batteries, references, and source materials included. Read more
- A Believable Attack Using EIP Cards
Turns out it would cost you between $1 and $1.50 in materials to pull off an EIP Card scam, plus procurement and assembly - the rapport you get from doing this is easily more valuable, and could be a viable attack in the real-world. Read more
- How to Ensure Your EIP Card is Real
A security engineer's guide on how to stay safe with any "EIP Card" you got in the mail. Begone, scammers! Read more
- EIP Mailer Photo Archive
It's a scam! It's identity theft! No, wait, it's actually what passes for 'effort' at a federal level! Read more
- EIP Cards Made Fraud Easier
Who thought distributing debit cards in unmarked envelopes that predominantly reference a non-.gov domain was a good idea? I almost threw it away, then thought I had my identity stolen, then got so frustrated I wrote this post. Read more