Threat Insight

Cybersecurity research and commentary on malware, user actions, and other threats to information security
March 08, 2017

Magnitude Actor Adds a Social Engineering Scheme for Windows 10


Proofpoint researchers provide background on Magnitude activity and explore a newly added social engineering scheme

March 06, 2017

Phishing Goes Mobile – The Rise of SMS Phishing

Dave Jevans

Proofpoint researchers track an SMS phishing campaign and gain insights into this increasingly prevalent attack vector.

March 01, 2017

Another Tax Season Brings More Phishing Lures and a Variety of Malware

Proofpoint Staff

Proofpoint researchers track several threats that leverage IRS and tax themes to convince victims to disclose personal information and open malicious documents and links.

February 09, 2017

Snowshoe Spamming Brings Scale to Savvy Subdomain Phishing Attacks

Proofpoint Staff

In this blog we describe one of these large-scale attacks and outline best practices for mitigation with DMARC (Domain-based Authentication Reporting and Conformance), a technology that is highly effective but which must be implemented correctly to avoid unintended problems and time-consuming maintenance.

February 08, 2017

New Serpent Ransomware Targets Danish Speakers

Proofpoint Staff

Proofpoint researchers discover a new ransomware variant with polished ransom pages and convincing lures.

February 07, 2017

Bigger, Faster, More - Q4 Threat Summary and Year-in-Review Details Evolving Threats

Proofpoint Staff

Proofpoint researchers look back at the last quarter of 2016 and the full year to understand the shifting threat landscape and provide recommendations for the year to come.

February 03, 2017

“Plus ça Change”: Malware and Phishing Keep Making the Rounds in France

Proofpoint Staff

Proofpoint researchers track a variety of recent online threats, ranging from banking Trojans to credential phishing, targeting French interests.

February 02, 2017

Oops, they did it again: APT Targets Russia and Belarus with ZeroT and PlugX

Darien Huss, Pierre T, Axel F and Proofpoint Staff


February 02, 2017

Hook, line, and sinker - A closer look at a sophisticated phishing kit

Proofpoint Staff

Proofpoint researchers analyze the capabilities and data flow of a new PayPal phishing kit.

January 17, 2017

EITest Nabbing Chrome Users with a “Chrome Font” Social Engineering Scheme


Proofpoint researchers provide background on EITest activity and explore a newly added Chrome case of the EITest infection chain