Search the repository of unique attacks observed by the Abnormal Intelligence team.
Vacation Planner Impersonator Attempts Credential Phishing with Compromised Account

An attacker gains control of a vacation resort’s customer service email address and attempts to steal sensitive information after informing the recipient of a refund.

Apple Impersonator Creates Fake Landing Page in Credential Phishing Attempt

An attacker cleverly designs a fake landing page that mimics Apple’s legitimate website to entice the recipient to input sensitive information.

Multi-Layer Payment Fraud Attack Attempts Redirect of $13.5 Million Invoice

After compromising a construction company, an attacker circumvents typical security protocols and creates a look-alike domain in a fake billing scam.

TSB Bank Impersonator Uses Look-alike Domain in Likely AI-Generated Credential Phishing Attack

An attacker utilizes an unregistered look-alike domain as a mask to impersonate TSB Bank and steal sensitive information.

Netflix Impersonator Likely Utilizes Generative AI in Credential Phishing Attack

An attacker takes control of a legitimate domain to impersonate Netflix customer support in a credential theft attempt.

Attacker Takes Over Established Domain in Likely AI-Generated Credential Phishing

An attacker breaks into an 21-year-old email account and links to a malicious IPFS gateway to steal sensitive information.

Likely AI-Generated Metlife Advisor Impersonator Attempts Financial Services Scam

An attacker uses social engineering techniques to build trust with a recipient before likely stealing sensitive information and money.

Fake Billing Scam Attempts Payment Fraud for $114,000 with New Banking Details

An attacker impersonates an accountant using a free webmail account to request payment of a $114,000 invoice.

BEC Attack Requests New Payment Methods for Outstanding Invoices in Attempted Payment Fraud

After gaining access to a legitimate account, an attacker attempts payment fraud by requesting ACH transfers instead of payments via check.

Amazon Spoofer Attempts Credential Phishing with Look-alike Domain

Using friendly language and a hidden malicious link, an attacker impersonates Amazon to steal sensitive information.

Sophisticated USPS Impersonator Attempts Credential Theft in Multi-Layered Attack

An attacker likely uses generative AI to create a fake automated USPS message about incorrect address information, including links to a fake USPS landing page.

Investment Opportunity Spoofer Offers Financial Services in Likely AI-Generated Scam

An attacker offers business financing options and promises commission for all successful referrals using a spoofed address.

Cosmetics Brand Impersonator Attempts Payment Fraud in Fake Billing Scam

An attacker uses generative AI to attempt payment fraud by impersonating an Australian cosmetics brand.

Freight Company Impersonated in Likely AI-Generated Credential Theft Attempt

An attacker utilizes a close resemblance freight company DAT One's domain in a credential theft attempt.

Australian Government Spoofer Promises Tax Refund in Likely AI-Generated Credential Theft

An attacker pretends to be from the “Australian Taxation Office” to steal the victim’s login credentials by promising a tax refund.

Debt Collector Spoofer Attempts Credential Theft

An AI-generated attack impersonates a debt collector and creates a sense of urgency to attempt to steal personal information.

LinkedIn Spoofer Uses News of Silicon Valley Bank Closure to Attempt Payment Fraud

Attacker impersonates the LinkedIn billing department and references the recent closure of SVB in this likely AI-generated attack.

Likely AI-Generated Attack Attempts Credential Phishing

An attacker uses a generative AI tool to spoof an insurance company, hoping to steal login credentials.

AI-Generated Credential Theft Attempted via Internal Company Impersonation

By leveraging urgency, an attacker sends an internal company communication in an attempt to steal credentials.

Kraken Exchange Spoofer Attempts to Steal Login Information

An attacker impersonates a popular cryptocurrency exchange and creates a fake website to steal login credentials.


Attack Type

Impersonated Party

Impersonated Brand

Attack Goal

Attack Vector

Attack Tactic

Attack Theme

Attack Language