Research & guides: how today’s browser attacks work.
Most attacks now start in a browser tab, not in an attachment. These guides explain each one in plain language: what you see, what really happens, and what stops it.
For everyone
A CAPTCHA asked you to press Windows + R
Why it is a ClickFix scam, what to do if you already pasted, and the one rule that keeps you safe.
Read the guide →Chrome’s new ClickFix warning — is it enough?
What Chrome’s Enhanced Protection warning covers, what it sends to Google, and what an extension adds.
Read the guide →For IT and security teams
What is ClickFix?
The copy-paste attack your users run for the attacker, why defences miss it and where to break the chain.
Read the guide →Device code phishing in Microsoft 365
The real Microsoft page, the wrong person signed in. How to block the flow and warn users in time.
Read the guide →AiTM phishing and MFA bypass
How proxy kits relay your MFA and steal the session cookie, and what actually stops them.
Read the guide →SC: the WordPress backdoor that keeps its servers on Ethereum
Our research: a self-healing backdoor, its service worker in admins’ browsers and seven months of the contracts’ history.
Read the research →EtherHiding: malware in smart contracts
The malware host nobody can take down, and how to stop the lure it serves.
Read the guide →Stop these attacks before anything runs.
Free browser protection for everyone, in Chrome and Edge. One console for your whole company when you need it.