I co-authored a new [Unit 42 threat-intelligence update](https://github.com/PaloAltoNetworks/Unit42-timely-threat-intel/blob/main/2026-10-21-phishing-pages-hosted-on-AI-based-site-builders.txt) looking at how phishing pages hosted on AI-based site builders evade exact DOM-hash matching and send stolen credentials to chat apps.
Oct 21, 2026
A tech-support scam targeting Japanese speakers combines encrypted JavaScript with browser APIs designed to contain victims, including full-screen locks, keyboard hijacking, resource exhaustion and window re-spawning.
Feb 20, 2026
Tracking an active browser-in-the-middle phishing campaign that impersonates Meta and Facebook. The campaign uses copyright-infringement lures and redirect chains to send targets to BitM pages.
Sep 23, 2025