Topic
A fraud and phishing tactic where attackers mimic trusted brands' names, logos, or platforms to deceive users into trusting malicious sites, apps, or software.
Microsoft accounted for 33% of the brand-impersonation phishing attempts Check Point Research tracked in Q3 2026, up from 23% in Q2. Its examples include fake Antigravity and Apple pages that get visitors to run terminal commands themselves.
Reality
Scammers posing as Hollyland, Nike and Spotify lure YouTube creators to fake brand-deal portals that take Google passwords and one-time codes, ESET found. One sign-in hands over Gmail, Drive and the channel itself.
Reality
Ontinue launched ION for Dark Web Monitoring, an ION MXDR add-on that routes leaked credentials and lookalike domains to its analysts. Findings land in Microsoft Sentinel beside each customer's other alerts and are worked by the same analysts.
Reality
LinkedIn's survey of 500 Australian professionals found 65 per cent had skipped a job they wanted because they doubted it was real. With scammers cloning real employees' profiles, that doubt also lands on employers advertising genuine vacancies.
Reality
Malwarebytes found no malware and no fake login form across the network, so the sites pass every check a user is trained to run, and the companies selling the annual plans stay anonymous.
Reality
LastPass traced a fake Authenticator hosted on GitHub to a months-long impersonation campaign that spoofed at least 40 organizations, including its own brand. The server steering victims to the download was still being updated in September.
Perspective Coverage
4 publishersReality
LastPass and Delphos Labs say a single malware-as-a-service kit impersonated at least 40 companies on GitHub, and the kernel driver it delivered was Microsoft-attested and undetected by every engine on VirusTotal.
Reality
A phishing email impersonating Belgium's bpost asks for EUR4.95 in unpaid customs duty. Malwarebytes says the pages behind the demand are built to harvest bank and card credentials, and the fee is the pretext.
Reality
Malwarebytes has tracked the rewards-expiry smishing since early May 2026 and counted more than 1,000 template variants pointing at hostnames built as t-mobile plus six random letters under .top.
Reality
Check Point followed the chain from a reply under a verified airline post to a WhatsApp thread to a half-finished $500 transfer, and counted thousands of impersonation accounts with hundreds more appearing daily.
Reality
The callback number in the fake listing had already been used in scams impersonating McAfee and Norton. That makes the phone line the operator's durable asset, and the hosting platform is just an interchangeable front.
Reality
Eleven look-alike sites run a scan whose score is capped at 30 out of 100, then record which of 28 security products the victim removed. Endpoint tampering by consent, over the phone.
Reality