Threat case
Fake CAPTCHA ClickFix: When “Verify” Means Run a Command
The decisive warning is not the copied CAPTCHA design—it is the instruction chain that leaves the browser and ends in a system command.
Read case study →Threat cases
Real-World Phishing & ClickFix Case Patterns
Evidence-led examples showing how common phishing, fake verification and malicious-delivery pages work, what proves the risk and how to respond safely.
Threat case
Protected Document Phishing: The Invoice That Asks You to Sign In
A polished invoice viewer is not proof of legitimacy. Domain ownership, form behaviour and the requested sign-in reveal the stronger evidence.
Read case study →Threat case
Fake Meeting Invitation: Recognising a Video-Call Credential Lure
The meeting interface may look convincing, but the hostname, sign-in destination and unexpected download path expose the deception.
Read case study →Threat case
Fake Browser Verification: Why PowerShell Instructions Are Dangerous
A browser challenge should remain inside the browser. Instructions to paste into PowerShell or Terminal cross a critical safety boundary.
Read case study →Check a destination