Doppel Email Security is now generally available! Register for the webinar to learn more
Aarsh Jawa

Aarsh Jawa

Solutions Architect - Detections

Aarsh Jawa is a Solutions Architect - Detections at Doppel, specializing in threat intel and detection engineering. His skills include reverse engineering/threat hunting, phish kit analysis, threat intelligence report creation, and custom detection query/rule design to build automated pipelines that identify sophisticated impersonation campaigns, phishing attempts, and fraud schemes across social media, domains, and messaging platforms. Prior to Doppel, Aarsh authored Jumping into Cyber Security and built a SOC center based on open-source tools, bringing hands-on security operations expertise to his detection architecture work.

Blog Posts by Aarsh Jawa

Kali365: The New Phishing Kit Hijacking Microsoft 365 Tokens
Threat Intelligence

Kali365: The New Phishing Kit Hijacking Microsoft 365 Tokens

Kali365 is a new phishing kit that steals Microsoft 365 access tokens without harvesting passwords or triggering MFA prompts. Learn how this FBI-highlighted threat abuses legitimate Microsoft authentication workflows—and what security teams must do to stop it.
Aarsh Jawa
Aarsh Jawa
How a $10 Domain Hijacks Your C-Suite’s Trust
Research

How a $10 Domain Hijacks Your C-Suite’s Trust

One $10 domain can divert salary pools and compromise your ERP system. Read how to protect your workforce against high-targeted payroll phishing campaigns.
Aarsh Jawa
Aarsh Jawa
How to Build a URL Toolkit
Engineering

How to Build a URL Toolkit

Learn how to build a technical URL toolkit to automate extraction, protocol analysis, and IP pivoting. Scale your SOC workflow from manual triage to enterprise-level defense and infrastructure disruption.
Aarsh Jawa
Aarsh Jawa
Solving the SOC’s Death by a Thousand Clicks
Research

Solving the SOC’s Death by a Thousand Clicks

Learn why legacy SOAR tools fall short and how AI-driven Social Engineering Defense eliminates “death by a thousand clicks” while disrupting attacker infrastructure.
Aarsh Jawa
Aarsh Jawa
How Attackers Weaponize Canva, DocHub, and Your SaaS Stack
Threat Intelligence

How Attackers Weaponize Canva, DocHub, and Your SaaS Stack

Stop SaaS-orchestrated phishing. See how attackers weaponize Canva and DocHub to bypass SEGs and how Unified SED dismantles high-trust attacks quickly.
Aarsh Jawa
Aarsh Jawa
Social Engineering Tactics: Flipkart Sale Scam Looks to Victimize Holiday Shoppers
Threat Intelligence

Social Engineering Tactics: Flipkart Sale Scam Looks to Victimize Holiday Shoppers

Flipkart sale scams target holiday bargain hunters by using a fraudulent clone of the e-commerce giant’s checkout environment.
Aarsh Jawa
Aarsh Jawa
Threat Actors Use File Upload Bugs to Distribute Fake Support Numbers
Threat Intelligence

Threat Actors Use File Upload Bugs to Distribute Fake Support Numbers

Doppel’s Threat Intelligence Team recently observed Attackers abusing a webform bug to upload PDFs on trusted domains and distribute fake telephone support numbers.
Aarsh Jawa
Aarsh Jawa
Doppel Intelligence Brief: Fake CAPTCHA, Real Threat as New Campaign Uses PowerShell and AutoHotkey to Evade Detection
Threat Intelligence

Doppel Intelligence Brief: Fake CAPTCHA, Real Threat as New Campaign Uses PowerShell and AutoHotkey to Evade Detection

Doppel’s Threat Intelligence Team observed a rise in attacks abusing AutHotKey, fake CAPTCHA pages and clipboard hijacking in increasingly sophisticated social engineering campaigns.
Aarsh Jawa
Aarsh Jawa
Threat Intelligence Briefing: Abuse of Custom GPTs for Brand Impersonation and Phishing
Threat Intelligence

Threat Intelligence Briefing: Abuse of Custom GPTs for Brand Impersonation and Phishing

This method introduces a new threat vector: platform-hosted social engineering through trusted AI interfaces.
Aarsh Jawa
Aarsh Jawa
Social Engineering Tactics: Malware-as-a-Service Fuels Scalable Mobile Threats
Threat Intelligence

Social Engineering Tactics: Malware-as-a-Service Fuels Scalable Mobile Threats

The democratization of malware development has not only increased the volume of mobile threats, but has also amplified their impact.
Aarsh Jawa
Aarsh Jawa
Doppel Intelligence Briefing: Scripted Defenses in Phishing Kits Evade Analysts
Threat Intelligence

Doppel Intelligence Briefing: Scripted Defenses in Phishing Kits Evade Analysts

The Doppel Intelligence Team observed scripts within phishing kits that help attackers evade analysis.
Aarsh Jawa
Aarsh Jawa
Phishing Campaign Abuses Google Sites and OAuth to Steal Gmail Credentials
Threat Intelligence

Phishing Campaign Abuses Google Sites and OAuth to Steal Gmail Credentials

The following is a summary report produced by the Doppel Intelligence team.
Aarsh Jawa
Aarsh Jawa

Get in Touch

Interested in learning more about Doppel's approach to digital security?

Request a DemoLearn More About Doppel