Threat Intelligence

The SSO enrollment phishing kit hosts no branded content of its own. It asks Microsoft for your organization's genuine tenant branding at the moment a victim types their address, so every Microsoft 365 tenant with custom branding is a target at no extra cost to the attacker. Nothing brand-specific reaches a certificate log, and the same page broadcasts every credential it steals to everyone who loads it.

Kali365 is a new phishing kit that steals Microsoft 365 access tokens without harvesting passwords or triggering MFA prompts. Learn how this FBI-highlighted threat abuses legitimate Microsoft authentication workflows—and what security teams must do to stop it.

Weather events and natural disasters are the ultimate pretext for phishing. Learn how attackers exploit storms to defraud individuals and businesses.

Cybercriminals are tricking employees into opening the door to corporate data. Explore real-world social engineering examples spanning attack surfaces.

Stop SaaS-orchestrated phishing. See how attackers weaponize Canva and DocHub to bypass SEGs and how Unified SED dismantles high-trust attacks quickly.

Doppel’s Threat Intelligence Team recently uncovered fillable direct deposit forms on public document editors, which in the wrong hands could mean ACH fraud and even account takeover.

Flipkart sale scams target holiday bargain hunters by using a fraudulent clone of the e-commerce giant’s checkout environment.

Doppel’s Threat Intelligence Team recently observed Attackers abusing a webform bug to upload PDFs on trusted domains and distribute fake telephone support numbers.

WhatsApp is increasingly used in cyber campaigns targeting enterprises and SMBs. Learn how attackers exploit trust, and how Doppel delivers digital risk protection.