Kaspersky official blog

Before launching a phishing attack, attackers initiate correspondence with the victim.

Cybercriminals have started leveraging Google’s legitimate AppSheet service to roll out phishing campaigns that target users’ personal data and credentials. Here’s a look at how this is even possible, and what you need to do to secure your accounts.

Phishers using ASCII art to mask QR-codes.

As tax-return season rolls around, cybercriminals worldwide are shifting into high gear. They peddle fraudulent services, spoof official tax agency websites, and drain the bank accounts of unsuspecting taxpayers. Here’s how to spot phishing attempts and scams, along with tips for handling your tax documents securely

Attackers are delivering phishing links via Google Tasks notifications.

We’re diving into the most intriguing and sophisticated phishing and spam schemes intercepted by our experts throughout 2025.

We break down a new scam that leverages Telegram Mini Apps, and explain how to avoid taking the bait.

We follow the trail of a phishing attack to break down, step-by-step, what happens to the data stolen from users.

We discovered a new wave of attacks on WhatsApp users in which attackers steal victims’ accounts using fake voting pages and social engineering on social networks.

The Kaspersky for Android app can now detect malicious links in notifications from any app.

Attackers spin poignant tales of lost private keys as they try to phish seed phrases.

Don’t panic. Again, don’t panic. Did we say don’t panic? A common threat explained in simple terms.

A curious case of spear-phishing email techniques employed on a mass scale.

Scammers are exploiting GetShared to bypass email security.

Phishers have adopted another trick: they send emails pretending to be from Docusign with a fake link to a document that the recipient must sign.

An Office 365 security alert as bait in a phishing email.

Telegram bot sells subscriptions to phishing tools to hack Microsoft 365 accounts, including 2FA bypass.

Cybercriminals are using AitM techniques to compromise accounts of company executives. How do they do this, and how to protect against it?

Independent cybersecurity lab AV-Comparatives put 15 anti-phishing solutions to the test — with only eight making the grade. We took home the gold, adding to our already extensive collection of accolades.

A turnkey home? A turnkey website? How about turnkey phishing? Scammers now sell turnkey phishing services to other scammers. Read on to find out how it works.

Developers’ accounts are being hijacked using fake job offers sent from a legitimate GitHub address.