Research, guides and case studies from the takedown desk.

Phishing

Milk Dragon Is Selling Your Brand’s Discounts

In the weeks before Black Friday, shoppers go looking for a deal. They join bargain groups, follow brand pages and click on promotions they would usually scroll past.

October 13, 2026

7 min read

Behind the scenes

The Next Chapter of Threat Operations at Unphish

On Monday, 28 September, we took a major step forward at Unphish, moving our clients across to the latest version of our platform.

October 9, 2026

The Hidden Risk of a Multi-Brand Portfolio

For an organisation managing multiple brands, there isn’t necessarily one threat landscape to monitor.

October 5, 2026

Scammers have better growth teams than you do

Somewhere right now, a scam operation is running a sharper go-to-market motion than most fintechs.

October 1, 2026

8 min read

Fake Airline App Becomes a Banking Threat

Uncover the dangers of the GoldDigger malware, an Android Trojan that targets airline logins and steals personal information.

September 30, 2026

8 min read

When Patients Become the Target of Healthcare Impersonation

Scammers are impersonating healthcare providers, insurers, patient portals and trusted doctors to target patients. Here's how these threats work and how to see the wider activity behind them.

September 24, 2026

The Fintech Customer Journey Is Also an Attack Surface

Get insights into fintech scams that exploit digital interaction. Stay safe while managing your finances online with our guide.

September 16, 2026

10 min read

Phishing

Understanding Smishing and Vishing: Phishing that Moves Beyond Traditional Channels

Learn how smishing and vishing attacks use SMS, phone calls and AI-powered impersonation, and how organisations can detect and disrupt wider campaigns.

September 14, 2026

8 min read

What Sits Behind a Fake Gambling Website?

When a website is found impersonating a wagering brand, the copied logo and branding are often the most obvious signs of abuse. But they are only part of what can be investigated.

September 2, 2026

7 min read

Phishing

Platform Phishing: When Trusted Infrastructure Becomes the Attack Vector

Discover platform phishing: a new trend in cyber threats where attackers use trusted platforms to execute phishing attacks.

September 1, 2026

Inside a Betting Brand Impersonation and Affiliate Redirect Campaign

Learn how a fake betting website impersonates legitimate brands and what that means for online safety. Protect your information today.

August 19, 2026

Your Products Are Being Advertised. Just Not By You.

Learn how ad scams leverage brand trust to deceive customers. Discover the impact of fraudulent advertisements on e-commerce.

August 17, 2026

When AI Doesn’t Need Your Logo

Discover the impact of AI-generated scams on online brand integrity and how they exploit trustworthiness in digital spaces.

August 14, 2026

Not-for-profit

Fake Charity Loan Pages Are Targeting Financially Vulnerable Australians

Investigate the reality behind fake charity loans. Learn how scammers impersonate charities to lure victims into fraudulent traps.

August 9, 2026

The Rise of Fake Download Domains

Protect your device from fake download domains. Identify phishing scams and learn how attackers create convincing offers online.

August 4, 2026

Not-for-profit

A Charity’s Most Valuable Asset is Also its Most Exploitable

Discover how brand impersonation scams target charities and what organisations can do to protect donors, beneficiaries and their reputation.

July 31, 2026

Not-for-profit

The Rise of Fake Charity Campaigns

For charities, trust is one of their most valuable assets. Unfortunately, it's also what makes them an attractive target for cybercriminals.

July 27, 2026

How Cybercriminals Exploit Trusted Delivery Services

Discover how fake delivery notifications use phishing domains to impersonate trusted brands, and how organisations can detect and disrupt these scams.

July 20, 2026

Dedicated Phishing Domains: Built to Deceive from Day One

Dedicated phishing domains are built specifically to deceive. Learn how attackers create, distribute, and conceal these domains, and what it takes to suspend them quickly.

July 14, 2026

Why Audit Trails Matter More Than Ever Under the SPF

Overview When a scam is detected, the investigation doesn’t end with identifying the threat.

July 9, 2026

Search Engine Manipulation at Scale

Uncover the dangers of search engine manipulation and how scammers exploit legitimate searches to target unsuspecting victims.

July 7, 2026

How the SPF Turns Brand Impersonation Into a Compliance Issue

Brand impersonation has long been one of the most common tactics used in online scams.

July 1, 2026

Brand Protection Has Left Exam Security Behind

Brand protection in the examinations sector is overdue for change. Explore how technology-led detection and enforcement can disrupt modern exam fraud networks.

June 22, 2026

The SPF Doesn’t Require Takedowns. It Requires Disruption.

Australia's Scams Prevention Framework focuses on disruption, not just takedowns. Learn why scam campaigns require monitoring, intelligence, and coordinated enforcement to reduce harm.

June 18, 2026

The SPF 28-Day Investigation Clock

Learn how the SPF's 28-day investigation requirement works, what constitutes actionable scam intelligence, and why organisations need more than detection capabilities to support compliance.

June 17, 2026

Behind the scenes

Behind the Scenes of Threat Operations at Unphish

Go behind the scenes of Threat Operations at Unphish and discover how analysts detect, investigate, validate, and disrupt phishing, impersonation, and online scam campaigns.

June 15, 2026

What “Reasonable Systems” Means Under Australia’s SPF

How will regulators assess reasonable systems and processes under Australia's Scams Prevention Framework? Find out how to stay compliant with Unphish.

June 12, 2026

How Scammers Exploit Trusted Ticket Resale Platforms

An investigation into how ticket scammers attempt to bypass secure resale platforms such as Tixel using social engineering tactics, off-platform payment requests, and identity-based trust manipulation through Facebook ticket groups.

June 9, 2026

7 min read

Australia’s Scams Prevention Framework: What Every Business Needs to Know

The Scams Prevention Framework (SPF) will require banks, digital platforms, and telecommunications providers to proactively prevent, detect, and disrupt scams. Discover what businesses need to know before the 2027 commencement date.

June 3, 2026

How Attackers Bypass MFA

Explore how attackers bypass multi-factor authentication through MFA fatigue attacks, adversary-in-the-middle phishing, session hijacking, token theft, and consent phishing.

June 2, 2026

How Public Comment Sections Become Targets for Automated Abuse

A real-world case study from Unphish exploring how automated abuse campaigns discovered and targeted low-visibility blog comment sections with spam, shortened URLs, affiliate promotions, and automated submissions.

May 25, 2026

When Legitimate Websites Become Phishing Weapons

Compromised website phishing allows attackers to hide phishing pages on legitimate domains. Explore how these attacks work, why they bypass security tools, and how to approach phishing site takedowns effectively.

May 25, 2026

The Reality Gap: Why Some Threats Stay Online Longer Than They Should

Why do some phishing sites stay online longer than expected? Explore the factors affecting phishing site removal, scam website takedowns, provider response times, and online threat enforcement.

May 18, 2026

How to Remove Fake Websites, Apps & Social Profiles Quickly

Improve takedown success across fake websites, apps and social media accounts with faster validation and platform-specific enforcement strategies.

May 6, 2026

One Domain, Twelve Brands Targeted

Anatomy of a live subdomain-abuse campaign and what security teams should do about it In early April 2026 a single parent domain – offcialonlinee.

May 4, 2026

Why Your Brand is Targeted for Phishing Attacks

Why some brands are targeted more than others in phishing attacks. Learn how attacker economics, domain posture, and takedown speed shape brand risk profile.

April 22, 2026

What Happens After You List an Item on a Marketplace

Listed an item and instantly got flooded with emails? This case study breaks down how scammers target marketplace listings using automation and phishing tactics.

April 16, 2026