Threat actors deployed over 850 fake tax and toll websites to steal personal and financial data from U.S. and international victims. Netcraft uncovers the latest smishing campaign targeting taxpayers and drivers ahead of the October 15 IRS extension deadline.

Netcraft uncovers a phishing campaign targeting GMO Aozora Bank using legacy Basic Authentication URLs. Learn how this outdated technique is being revived to deceive users and what organizations can do to defend against it.

Netcraft research reveals how online coding tutorials and student “website clone” projects can unintentionally create fully functional phishing kits mimicking brands like Amazon and Instagram. Learn how innocent exercises become cybercrime tools—and what educators can do to prevent it.

In the September 2025 survey we received responses from 1,337,528,194 sites across 285,209,235 domains and 13,806,606 web-facing computers. This reflects a change of 37.5 million sites, 3.7 million domains, and 9,298 web-facing computers. nginx experienced the largest gain of 22.8 million sites (+7.34%) this month, and now accounts fo...

Brand abuse is rising fast, costing businesses trillions and eroding customer trust. Discover 7 proven strategies to protect your brand online in 2026 across domains, social media, search, and marketplaces.

Netcraft uncovers 17,500+ phishing domains linked to the Lighthouse and Lucid PhaaS platforms, targeting 316 brands across 74 countries. Learn how automation and intelligence help disrupt these evolving threats.

Phishing is moving from encrypted platforms like Telegram back to email. Learn why cybercriminals are shifting tactics — and how to protect your business in 2025.

False positives cost more than time. They damage trust, waste resources, and drive burnout. Unspoken Security's AJ Nash explores how to get automation right and rebuild credibility in your security program.

Cybercriminals are exploiting the Japanese Hiragana character “ん” in phishing domains to mimic trusted sites like Booking.com, Microsoft, and crypto wallets. Learn how this homoglyph trick evades detection and what defenders can do to stay ahead.

Netcraft exposes a global task scam cluster exploiting brands like Delta, AMC, and Universal Studios. Using API-driven templates and crypto payments, the fraud has already linked to over $1M in transactions.