







Found a phishing site? Get started now — see if it's in the Tank:
FBI disrupts massive AI-powered phishing service using a million URLs
In a coordinated effort, the FBI, working with Google and Black Lotus Labs, has dismantled a massive Chinese phishing-as-a-service operation called Outsider Enterprise with thousands of phishing websites used to steal credit card data and passwords.

Petname Tool: Enabling web site recognition using the existing SSL infrastructure
The existing WWW infrastructure already provides for authentication of web sites. Unfortunately, the advent of phishing has shown that the mainstream user interface to web site authentication is not meaningful to users. This paper proposes a new browser user interface widget, the petname tool, that integrates meaningful authentication information into the browsing workflow.
https://bsky.social/account/sign-in
Inside the Underground Site Where ‘Neural Networks’ Churn Out Fake IDs
The site, called OnlyFake, threatens to streamline everything from bank fraud to money laundering, and has implications for cybersecurity writ large.

Hackers Had A Live Feed Of Every ID This Verification Company Scanned. For Over A Year.
From the very beginning of this recent obsession with identifying everyone online (yes, they like to call it “age” verification, but it always ends up as identity verification), we̵…

Scam Number Check Free Reverse Phone Lookup - Who Called Me? | Malwarebytes
Check any phone number for scams, spam, and unknown callers. Our free reverse phone lookup tool identifies who called you. No signup required. Try it now.

PACT: Anonymous Credentials for the Web – Mozilla Hacks - the Web developer blog
A deeper look at PACT: a new initiative to tackle the rising tide of CAPTCHAs on the web whilst keeping the web open and preserving user's privacy.

Scam alert. I know they’re faking pocketstars website but they’re targeting OnlyFans girls to create fake profiles of and steal content. 1/2
98 votes, 119 comments. 576K subscribers in the onlyfansadvice community. This is a educational space for onlyfans creators, ran by onlyfans…
Pro-Iran hackers claim ‘sophisticated’ attack on Bluesky
A pro-Iran hacking group that has been relentlessly targeting American companies with DDoS attacks claims it disrupted Bluesky with what the social media site called a “sophisticated” attack that…

Mozilla.ai Joins Flower Hub as Launch Partner
Mozilla.ai joins Flower Hub as a launch partner with fed-phish-guard, a federated phishing detection project. The classifier trains across distributed clients and shares only model updates, allowing collaborative learning without centralizing browsing data.

🦫 alert! We published the second episode of "Teach the Web new Tricks", featuring native support for @atproto.com ! Learn more how we improve user agency and privacy at webbeef.org/atproto.html : - Native at:// protocol support. - Log in your PDS and forget OAuth ! - Authorize 3rd parties
✅ @jcsalterego.bsky.social has been verified by @bsky.app.
reminder that you can always revoke oauth access at bsky.social/account (also a good place to check for apps you forgot you logged in to !)
new blog post! 📚💙 The #booksky labeler is here, plus some OAuth updates that I know all of you were patiently waiting for!
Sneak Peek of the NEW BookSky Labeler & OAuth updates
booksky.ink
Uncovering Coordinated Networks on Social Media: Methods and Case Studies

A General Method to Find Highly Coordinating Communities in Social Media through Inferred Interaction Links
Exposing Cross-Platform Coordinated Inauthentic Activity in the Run-Up to the 2024 U.S. Election

Disrupting Dark Networks
Ecosystem or Echo-System? Exploring Content Sharing across Alternative Media Domains

↳ Slopaganda: The Inauthentic YouTube Network Selling Secession to Albertans — Canadian Digital Media Research Network