PhishFort

Phishing and brand protection. Safeguarding customers, brand equity, and revenue.

[PhishFort @PhishFort]

Your firewall trusts residential IPs.

IoT botnets sell exactly that: access to compromised devices that turn attack traffic into "legitimate" requests.

How it works. What stops it:
https://t.co/IiqD4ERO1F

[PhishFort @PhishFort]

In gambling, brand abuse isn't just a reputation problem.

When fake sportsbooks operate under your license without one, that's a regulatory risk.

We helped a global betting operator dismantle 1,400+ threats, including geofence-bypass infrastructure.

Read the full case: https://t.co/3Sx95ZewjJ

#Gambling #BrandProtection #PhishFort

[PhishFort @PhishFort]

📍 IGB Live London — today.

Monday, we published the case: 4,700+ threats, 98.9% takedown rate.

Today we're at the event to talk about what's behind those numbers.

#iGaming #BrandProtection #PhishFort

[PhishFort @PhishFort]

Attackers are hosting phishing on https://t.co/sifi79QCbz.

Valid HTTPS. High-reputation domain. Bypasses most filters.

LotL using Google's own infrastructure → infostealers + crypto drainers.

Read our Breakdown:
https://t.co/e2wnDNGxwQ

[PhishFort @PhishFort]

How many active threats does your brand have right now?

An iGaming operator thought ~800/year. They had 4.700🫢

Not to brag, but... we found them and took down 98.9%.

https://t.co/CFuMh9mAFZ

P.S If you're chasing threats like these and you're at IGB Live London this week, we'll be there on Wednesday. Find the team.📍

[PhishFort @PhishFort]

Off to London next week 🇬🇧

While everyone talks about player acquisition and growth, we'll be focused on another question:

How do you keep players safe without adding friction?

Looking forward to the conversations at #iGBLive.
#IGBLIVE2026 #igaming

[Revoke.cash @RevokeCash]

@PhishFort We appreciate the partnership. Phishfort is doing a great job at helping our users stay protected from phishing 🫡

[PhishFort @PhishFort]

We’ve been working with @RevokeCash for a while now. From monitoring fake domains and running takedowns to watching the same attack repeat every time a DeFi exploit goes viral.

Would you know if the revoke site you're on right now is real? How long do you think it takes for a fake version of your tool to go live after a hack? 👀

Today we are breaking it all down.

https://t.co/67GHVaOPMx

[PhishFort @PhishFort]

Your SOC team isn't running PhishFort yet? Book a demo with our team and see the dashboard in action: https://t.co/vUMdZfWcCa

[PhishFort @PhishFort]

Big update for the PhishFort community!
Your dashboard is now an app. Install it from the sidebar — desktop, mobile, tablet, one click.

No app store. No update prompts. Full detection and takedown visibility wherever you are.

https://t.co/T0eKuzRe0n

[PhishFort @PhishFort]

The entry point wasn't inside the system. It was a cloned site nobody was watching.
Brand impersonation and internal fraud aren't separate problems. They're the same supply chain, and thankfully, we're here to help...
https://t.co/vW3GPU7Itf

[PhishFort @PhishFort]

An iGaming operator thought they were having their best acquisition quarter in years.

Well... They weren't. 🚩🧵

[PhishFort @PhishFort]

A fake login page had been harvesting player credentials for weeks. Clean onboarding. No flags. Months of promo budget gone before anyone connected the dots.

No breach. No ransomware. No headlines.
Just metrics that looked healthy while synthetic accounts ran quietly through the platform.

[PhishFort @PhishFort]

🔴 LIVE WEBINAR — June 25 · 11AM EST

Fraud has nearly tripled in a decade.
It's now the #1 CEO cyber concern — ahead of ransomware.

@jdrangosch breaks down the real economic impact of phishing in 2026.

👇 Register in the link below
https://t.co/DZkbQeQ5T2

[PhishFort @PhishFort]

The World Cup kicks off Thursday ⚽🏆

While we've been checking fixtures — threat actors have been registering domains. Since April.

13,000+ FIFA-themed domains. ~1,145 malicious. Fake apps. Credential clones. Paid ads pushing users to spoofed betting sites.

The breakdown is here

#WorldCup2026

https://t.co/QTuj2Zfukd

[PhishFort @PhishFort]

So, a couple of things organizations should take from this:

— Define which operations require human review regardless of AI confidence
— Apply risk tiers by account profile — not all accounts carry the same blast radius
— Monitor for patterns of low-friction requests targeting high-value accounts

AI handles throughput. Humans own approval on anything that matters.

#CyberSecurity #AISecurity #SocialEngineering #BrandProtection #PhishFort

[PhishFort @PhishFort]

A couple of days ago, the White House Instagram account was compromised through Meta's AI support system.

No exploit. No malware. A simple, polite request.. and the AI complied.

Three months earlier, Meta had celebrated a 30% drop in account hacks thanks to their new AI support.

let's see what happened 🧵

[PhishFort @PhishFort]

The problem wasn't the model. It was the architecture decision to make it the sole gatekeeper — with no human checkpoint on high-risk operations.

A human agent would have flagged a credential swap on a verified government account. The AI saw a task. It completed it.

[PhishFort @PhishFort]

gm frens 🔥
tomorrow. london. infosec. 🇬🇧

Part of our team is on his way — if you're going to be there and want to talk brand protection, phishing, or just vibe — slide into our DMs and let's make it happen

not a booth. just good convos ☕
see you there 🫡

#InfosecurityEurope #BrandProtection #Phishing

[PhishFort @PhishFort]

Google Workspace phishing campaigns are becoming increasingly difficult to distinguish from legitimate business activity.

That’s what makes them dangerous.

A lot of teams are underestimating how polished these campaigns have become.

We broke down a recent case here:
https://t.co/PgLtSMF3BQ