--- title: "#phishing articles | Hashnode" description: "Explore 341 articles tagged #phishing on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/phishing" --- Tag # #phishing 341 posts · 13 followers [Qnayds Seo](https://hashnode.com/@qnay) · [15h ago](https://hashnode.com/posts/what-is-phishing-how-to-identify-and-avoid-online-scams/6af41109fd8e4fdc3b4a9cf2) ### [What Is Phishing? How to Identify and Avoid Online Scams](https://qnayds.hashnode.dev/what-is-phishing-how-to-identify-and-avoid-online-scams?utm_source=hashnode&utm_medium=feed) Learn what phishing is,common types of phishing attacks, how to identify suspicious messages,and practical tips to protect yourself from online scams. 5 min read · [qnayds.hashnode.dev](https://qnayds.hashnode.dev/what-is-phishing-how-to-identify-and-avoid-online-scams?utm_source=hashnode&utm_medium=feed) [Sedat Pehlivantürk](https://hashnode.com/@sedatpehlivanturk) · [5d ago](https://hashnode.com/posts/how-phishing-exploits-search-seo-poisoning-and-cloaking/6aedeeac62776a1b641c1d64) ### [How Phishing Exploits Search: SEO Poisoning and Cloaking](https://sedatpehlivanturk.hashnode.dev/how-phishing-exploits-search-seo-poisoning-and-cloaking?utm_source=hashnode&utm_medium=feed) It sounds like an exaggeration. It isn’t. A brand search feels safe precisely because the results almost never change — and that stability is exactly what an attacker exploits. In this article I’ll wa 7 min read · [sedatpehlivanturk.hashnode.dev](https://sedatpehlivanturk.hashnode.dev/how-phishing-exploits-search-seo-poisoning-and-cloaking?utm_source=hashnode&utm_medium=feed) [Vũ Nhật Lâm](https://hashnode.com/@kami61) · [6d ago](https://hashnode.com/posts/fake-calendly-meta-careers-phishing-facebook-google-en/6aebffee97c3d3acd741e78b) ### [A Fake Meta Interview Slot: Cloned Calendly Pages That Take the Password and the 2FA Code in Real Time](https://blog.fiscybersec.com/fake-calendly-meta-careers-phishing-facebook-google-en?utm_source=hashnode&utm_medium=feed) Summary Malwarebytes found a wave of websites posing as Calendly booking pages for job interviews at Meta. Visitors pick a slot for a 30-minute phone call with a "recruiter", fill in their details, pa 11 min read · [blog.fiscybersec.com](https://blog.fiscybersec.com/fake-calendly-meta-careers-phishing-facebook-google-en?utm_source=hashnode&utm_medium=feed) [Jaden Vo](https://hashnode.com/@jadenvo259) · [Nov 4](https://hashnode.com/posts/spot-lookalike-phishing-domains-in-python-punycode-homoglyphs-and-typos-in-140-lines-of-stdlib/6aea881fb1a847fe28b58ed4) ### [Spot Lookalike Phishing Domains in Python: Punycode, Homoglyphs and Typos in ~140 Lines of Stdlib](https://jadenvo259.hashnode.dev/spot-lookalike-phishing-domains-in-python-punycode-homoglyphs-and-typos-in-140-lines-of-stdlib?utm_source=hashnode&utm_medium=feed) Decode xn-- labels, catch mixed Cyrillic/Latin names, compare "skeletons" against a watchlist and fail CI on a hit, with a tested script and unit tests 9 min read · [jadenvo259.hashnode.dev](https://jadenvo259.hashnode.dev/spot-lookalike-phishing-domains-in-python-punycode-homoglyphs-and-typos-in-140-lines-of-stdlib?utm_source=hashnode&utm_medium=feed) [2](https://hashnode.com/posts/spot-lookalike-phishing-domains-in-python-punycode-homoglyphs-and-typos-in-140-lines-of-stdlib/6aea881fb1a847fe28b58ed4) [Cyber Knight](https://hashnode.com/@cyberknight2479) · [Nov 3](https://hashnode.com/posts/the-ai-agent-didn-t-break-the-product-it-walked-into-the-sales-tool/6ae986f0ba55e52190a388af) ### [The AI Agent Didn't Break the Product. It Walked Into the Sales Tool.](https://nulltrace.hashnode.dev/the-ai-agent-didn-t-break-the-product-it-walked-into-the-sales-tool?utm_source=hashnode&utm_medium=feed) WorkOS builds the login layer for thousands of companies. The breach it disclosed on 2 November didn't touch that product — it reached an internal sales app instead, and what that app held is exactly what makes the next phishing email believable. 5 min read · [nulltrace.hashnode.dev](https://nulltrace.hashnode.dev/the-ai-agent-didn-t-break-the-product-it-walked-into-the-sales-tool?utm_source=hashnode&utm_medium=feed) [Kazem Mortazavi](https://hashnode.com/@kazem-mortazavi) · [Nov 2](https://hashnode.com/posts/why-business-email-compromise-slips-past-signature-based-email-filters/6ae87e17af85bc382990f294) ### [Why Business Email Compromise Slips Past Signature-Based Email Filters](https://securityland.hashnode.dev/why-business-email-compromise-slips-past-signature-based-email-filters?utm_source=hashnode&utm_medium=feed) A finance manager receives a short email that appears to come from the CEO: "Wire this amount to this account before noon. I'm in a meeting and can't take calls." No attachment, no link. No antivirus 2 min read · [securityland.hashnode.dev](https://securityland.hashnode.dev/why-business-email-compromise-slips-past-signature-based-email-filters?utm_source=hashnode&utm_medium=feed) [404 Founders](https://hashnode.com/@404-founders) · [Oct 31](https://hashnode.com/posts/microsoft-365-token-replay-token-spraying/6ae60c6361011b16ec112b7e) ### [Microsoft 365 Token Spraying Hit 79 Orgs Without a Password](https://404-founders.com/blog/microsoft-365-token-replay-token-spraying?utm_source=hashnode&utm_medium=feed) Huntress tracked stolen session tokens replayed into 79 organizations. The noisiest tenants were the safe ones. 12 min read · [404-founders.com](https://404-founders.com/blog/microsoft-365-token-replay-token-spraying?utm_source=hashnode&utm_medium=feed) [Mahir Faysal](https://hashnode.com/@mfaysaldev) · [Oct 29](https://hashnode.com/posts/how-to-check-if-a-qr-code-is-safe/6ae2c5e9e24b7ae07f15bfb9) ### [How to Check if a QR Code Is Safe Before You Scan It (iPhone, Android, UK and US)](https://mfaysaldev.hashnode.dev/how-to-check-if-a-qr-code-is-safe?utm_source=hashnode&utm_medium=feed) Spot fake QR codes before they cost you: preview the link, read the domain, scan it with a free checker, and know what to do if you already tapped it. 17 min read · [mfaysaldev.hashnode.dev](https://mfaysaldev.hashnode.dev/how-to-check-if-a-qr-code-is-safe?utm_source=hashnode&utm_medium=feed) [1](https://hashnode.com/posts/how-to-check-if-a-qr-code-is-safe/6ae2c5e9e24b7ae07f15bfb9) [Furqan Ashraf](https://hashnode.com/@jfreaks) · [Oct 28](https://hashnode.com/posts/how-to-check-fake-lookalike-domain/6ae1a4d3bc029b7507d8f54f) ### [Your Browser Won't Catch Every Fake Domain. Here's How to Check One Yourself](https://furqanashraf.hashnode.dev/how-to-check-fake-lookalike-domain?utm_source=hashnode&utm_medium=feed) Chrome 154 can miss lookalike domains. Check any suspicious domain with Punycode, RDAP and DNS, using free commands and a script you can run in 5 min. 8 min read · [furqanashraf.hashnode.dev](https://furqanashraf.hashnode.dev/how-to-check-fake-lookalike-domain?utm_source=hashnode&utm_medium=feed) [Cyber Knight](https://hashnode.com/@cyberknight2479) · [Oct 27](https://hashnode.com/posts/the-help-desk-that-wasn-t-there-how-a-teams-message-became-ransomware-in-under-17-hours/6ae0958b2ec3c926a0bcb543) ### [The Help Desk That Wasn't There: How a Teams Message Became Ransomware in Under 17 Hours](https://nulltrace.hashnode.dev/the-help-desk-that-wasn-t-there-how-a-teams-message-became-ransomware-in-under-17-hours?utm_source=hashnode&utm_medium=feed) No vulnerability. No malicious link. Just a chat window, a friendly name, and a six-digit code — and Arctic Wolf counted more than 400 cases. 5 min read · [nulltrace.hashnode.dev](https://nulltrace.hashnode.dev/the-help-desk-that-wasn-t-there-how-a-teams-message-became-ransomware-in-under-17-hours?utm_source=hashnode&utm_medium=feed) [1](https://hashnode.com/posts/the-help-desk-that-wasn-t-there-how-a-teams-message-became-ransomware-in-under-17-hours/6ae0958b2ec3c926a0bcb543)