Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Inside the Weebly Phishing Campaign: A Sophisticated Threat to Financial Institutions

A recent investigation by BlueVoyant’s threat analysts has uncovered a sophisticated phishing campaign exploiting the Weebly.com platform to create fraudulent websites targeting small to mid-sized banks and financial institutions across the United States. This campaign stands out for its widespread scale and diffusion. Over the past few months, BlueVoyant has identified hundreds of phishing websites targeting more than 200 American banks and financial institutions.

How to Replace Outdated Phishing Protection with Real-Time Brand Impersonation Defense

Phishing protection refers to the tools, strategies, and technologies used to detect and prevent cybercriminals from impersonating your brand, stealing credentials, and defrauding your customers. As attackers move faster and impersonate more convincingly, brands need more than just domain scans or email authentication to stay protected. Many security and digital teams rely on email filters, takedown services, or brand education to manage phishing risks.

The MemcycoFM Show: Episode 11 - Replacing Outdated Phishing Protection with Real-Time Defense

Phishing protection refers to the tools, strategies, and technologies used to detect and prevent cybercriminals from impersonating your brand, stealing credentials, and defrauding your customers. As attackers move faster and impersonate more convincingly, brands need more than just domain scans or email authentication to stay protected.

Warning: New Phishing Campaign Targets Instagram Users

A phishing campaign is targeting Instagram users with phony notifications about failed login attempts, according to researchers at Malwarebytes. Notably, the emails contain "mailto" links rather than traditional URLs, which help the phishing messages avoid being flagged by security filters. "Instead of linking to a phishing website, which is most common with emails like this, both the ‘Report this user’ and ‘Remove your email address’ links are mailto links," the researchers write.

Phishing Campaign Likely Targeting IT Departments and Bypassing Email Filters

The BlueVoyant Security Operations Center (SOC) recently responded to a client’s user accessing a potentially malicious link that further research identified as part of a recent, robust campaign aimed at stealing Twilio SendGrid credentials. The attack was investigated by BlueVoyant’s Threat Fusion Cell (TFC) to understand how it can bypass email filters, and how it likely targeted IT departments.

Phishing Scams: How to Spot & Stop Video Call Attacks! #cybersecurity

Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.