ConcealBrowse is leveraged by teams across the world to combat against weaponized URLs. The technology is constantly analyzing suspicious web artifacts to identify risk in
the form of drive-by attacks, phishing portals, and other threats that materialize while browsing.

At Conceal, your digital safety is our utmost priority. Our weekly threat report for the week of November 18th, 2024, unveils critical insights into the ever-evolving landscape of online threats.

The following report highlights recently detected sites that were deemed suspicious:

_____________

SHA-256: 3074a00c33a6892ee549ced168872d8ffb9c78fe10f47cea0921aed8ac60d6ee

This site was detected by ConcealBrowse on November 14th, after being seen by security vendors the day before. It was initially detected by nine vendors, and now there are 18 vendors
flagging the site for phishing. ConcealBrowse intervened with a 68% risk score due to privacy risks and poor site reputation.

Credentials stolen from this phishing page can be used by malicious actors to gain access into the account associated with the victim’s phone, which hold sensitive information such as saved
payment methods, location data, and personal notes. Malicious actors may also pose as the victim to members of the victim’s contact list. This will allow them to carry out more phishing
attacks by utilizing social engineering, continuing the chain of compromise. While in an isolated session, ConcealBrowse blocks keyboard input, so users cannot enter their credentials
into suspicious sites

ConcealBrowse is leveraged by teams across the world to combat against weaponized URLs. The technology is constantly analyzing suspicious web artifacts to identify risk in
the form of drive-by attacks, phishing portals, and other threats that materialize while browsing.

At Conceal, your digital safety is our utmost priority. Our weekly threat report for the week of November 4th, 2024, unveils critical insights into the ever-evolving landscape of online threats.

The following report highlights recently detected sites that were deemed suspicious:

_____________

SHA-256: 3cc1badaf474652682b537310b01a6934dcf7c3a52352746a9e492558007b950

This site was first detected by ConcealBrowse on October 29th, the day after security vendors began reporting. It was initially detected by 12 vendors, and there are currently 21 vendors
reporting this page for phishing and malicious activity. ConcealBrowse intervened with a 31% risk assessment, citing poor site reputation and suspicious behavior.

This site is impersonating the postal service as part of a parcel delivery scam. This scam operates by sending a message to a potential victim, explaining that an attempted delivery
failed due to an incorrect address. If the victim clicks on the link and proceeds past the screen pictured, the malicious actors will then attempt to gather personal information and payment
details. These phishing pages tend to appear very realistic, highlighting the importance of ConcealBrowse’s intervention to warn users that the site is deceptive.

ConcealBrowse is leveraged by teams across the world to combat against weaponized URLs. The technology is constantly analyzing suspicious web artifacts to identify risk in the form of drive-by attacks, phishing portals, and other threats that materialize while browsing.

At Conceal, your digital safety is our utmost priority. Our weekly threat report for the week of October 21st, 2024, unveils critical insights into the ever-evolving landscape of online threats.

The following report highlights recently detected sites that were deemed suspicious:

_____________

SHA-256: 6cf9936048770ae06f36694426d0902f61bc408de40892f594828c9363cae2e3

This site was first detected by ConcealBrowse on October 16th, the same day other security vendors began reporting. It was initially detected by three vendors, and that number has not changed. ConcealBrowse intervened with a 73% risk assessment due to privacy violations and suspicious behavior.

This domain has been previously associated with the distribution of a malware designed to steal banking information and distribute ransomware. Malware often has devasting consequences for an organization, as viruses can spread through networks and infect several devices at a time. While this site no longer has indicators of being compromised, it should still be avoided due to the possibility of reinfection. ConcealBrowse’s intervention warns users of potentially dangerous sites before they proceed to protect them against compromise.

ConcealBrowse is leveraged by teams across the world to combat against weaponized URLs. The technology is constantly analyzing suspicious web artifacts to identify risk in the form of drive-by attacks, phishing portals, and other threats that materialize while browsing.

At Conceal, your digital safety is our utmost priority. Our weekly threat report for the week of October 7th, 2024, unveils critical insights into the ever-evolving landscape of online threats.

The following report highlights recently detected sites that were deemed suspicious:

_____________

SHA-256: 21950b0234aa517ca5585d3085deaf93ffcc7838e583c979469364f76cdae476

This site was first detected by ConcealBrowse on October 1st, a few days after security vendors began reporting. It was initially detected by 11 vendors, and now has 23 vendors reporting it as phishing. ConcealBrowse intervened with a 35% risk assessment, due to identifying the brand impersonation and potential privacy violations.

This is a phishing page that utilizes a verification system to attempt to bypass security vendors. By making the user enter in the solution to the equation on the screen, the site is preventing automated scanners from seeing the credential harvesting attempts. This can allow the site to stay up for longer, granting more opportunities for malicious actors to steal credentials. ConcealBrowse’s intervention prevents keyboard input while in isolation, preventing users from passing the fraudulent verification system.

ConcealBrowse is leveraged by teams across the world to combat against weaponized URLs. The technology is constantly analyzing suspicious web artifacts to identify risk in the form of drive-by attacks, phishing portals, and other threats that materialize while browsing.

At Conceal, your digital safety is our utmost priority. Our weekly threat report for the week of September 23rd, 2024, unveils critical insights into the ever-evolving landscape of online threats.

The following report highlights recently detected sites that were deemed suspicious:

_____________

SHA-256: 9c340f663ca7b84781a4d0e590da4e21c7a47708650da3f0fae902652fb9280f

This site was detected by ConcealBrowse on September 17th, having been reported by other security vendors on the same day. While this site was only detected by one security vendor, its final URL was detected by 11. ConcealBrowse intervened on the end page with a 40% risk score due to suspicious behavior.

This is a phishing page that utilizes evasive techniques to avoid detection by security vendors. Many security vendors put URLs into automated environments to scan them for any malicious activity. In response to this, threat actors will create empty sites that only contain human verification widgets before allowing the user to be directed to the end page. These techniques also allow the phishing page to remain active for longer, potentially causing more users to fall victim to it. ConcealBrowse scans every URL, including redirects, to effectively protect users against phishing attempts.