Tag

Phishing

Explore in-depth articles about phishing attacks, including email phishing, spear phishing, smishing, and vishing. Learn how attackers craft deceptive messages, steal credentials, and compromise systems — and discover proven strategies to detect and block these threats.

posts

Fake Email

Fake Email: How to Spot, Stop, and Survive One

A Single Fake Email Cost Facebook and Google $100 Million Between 2013 and 2015, a Lithuanian man named Evaldas Rimasauskas sent a series of fake email messages to employees at Facebook and Google. He impersonated a legitimate hardware vendor, attached fraudulent invoices, and directed payments to bank accounts he controlled.

Carl B. Johnson Jun 03, 2026 6 min read
Phishing

What Is Phishing? A Security Pro's Real-World Guide

In 2023, the FBI's Internet Crime Complaint Center received over 298,000 phishing complaints — making it the most reported cybercrime category for the fifth consecutive year. And those are just the ones people actually reported. If you're asking what is phishing, you're asking the

Carl B. Johnson May 30, 2026 6 min read
Social Engineering Attacks

Social Engineering Attacks: Why Humans Are the #1 Target

In 2023, MGM Resorts lost roughly $100 million after a threat actor called Scattered Spider social-engineered the company's IT help desk with a single phone call. The attacker impersonated an employee, convinced the help desk to reset credentials, and within hours had burrowed deep enough to deploy ransomware

Carl B. Johnson May 30, 2026 6 min read
Dark Web

What Is the Dark Web? A Security Pro's Honest Guide

Your Employees' Passwords Are Probably Already There In 2024, the FBI's Internet Crime Complaint Center (IC3) reported over 880,000 complaints with potential losses exceeding $12.5 billion — and a significant chunk of that activity traces back to credentials and data bought and sold on the dark

Carl B. Johnson May 29, 2026 5 min read
Fake Mail

Fake Mail: How Threat Actors Exploit Your Inbox in 2026

The $4.88 Million Problem Sitting in Your Inbox Right Now In 2024, the FBI's Internet Crime Complaint Center reported that business email compromise — essentially sophisticated fake mail — cost victims over $2.9 billion in a single year. That wasn't a spike. It was a trend.

Carl B. Johnson May 28, 2026 5 min read
Cyber Incident Reporting

How to Report a Cyber Incident: A Step-by-Step Guide

In 2023, the FBI's Internet Crime Complaint Center received over 880,000 complaints with potential losses exceeding $12.5 billion — a 22% increase in losses from the year before. Yet the FBI estimates a massive number of cyber incidents still go unreported. That gap between what happens and

Carl B. Johnson May 23, 2026 5 min read
Phishing

What Is Phishing? A Security Pro's Real-World Guide

The Email That Cost One Company $100 Million In 2019, Toyota Boshoku Corporation lost $37 million in a single business email compromise attack. A threat actor impersonated a senior executive, convinced a finance employee to change wire transfer details, and the money vanished. That attack started with something deceptively simple

Carl B. Johnson May 15, 2026 5 min read
Phishing

What Is Phishing? The Attack Behind 80% of Breaches

In January 2024, a finance employee at a multinational firm in Hong Kong wired $25.6 million to criminals after a video call with what appeared to be the company's CFO. Every person on that call was a deepfake. The attack started with a single phishing email. If

Carl B. Johnson May 10, 2026 5 min read
Phishing

Phishing Attacks in 2026: What Actually Works to Stop Them

The Typo That Costs Billions: Why "Phising" Lands You Here Here's something I find fascinating — "phising" is one of the most commonly misspelled cybersecurity terms on the internet. If you searched for it, you're in exactly the right place. Phishing (with the

Carl B. Johnson May 02, 2026 6 min read