Allure Security Named to the 2026 Inc. 5000 Learn More

The Allure Security Blog

Research, analysis, and perspective on the evolving threat landscape, from phishing and brand impersonation to AI-generated fraud.

Featured

Fake payroll desktop app icon peeling away to reveal hidden remote access

Threat Intelligence

September 24, 2026

The Brand Was Real. The Desktop App Wasn’t.

Someone is impersonating major HR and payroll platforms with "native desktop apps" that do not exist. The download is real...

Dolly Parton death scam showing a fake sponsored social media post and impersonation accounts

Social Media Protection

August 27, 2026

Dolly Parton’s Death Brought Scammers Within Two Hours

A quick probe on the evening of August 26 flagged 62 impersonation threats across social platforms and ad networks. More...

Recent Posts

Gaming controller held by red digital wireframe hands on a purple background, representing gaming scams and cyber threats.

Threat Intelligence

September 29, 2026

How Gaming Scams Become Security Breaches

19 million attacks used gaming titles as bait last year. The malware they deliver…

Online Fraud

September 25, 2026

Why PayPal’s Name Is Worth More Than a Stolen Password

PayPal, Zelle, Venmo, and Cash App are among the most impersonated brands in the…

Threat Intelligence

September 24, 2026

The Brand Was Real. The Desktop App Wasn’t.

Someone is impersonating major HR and payroll platforms with “native desktop apps” that do…

Phishing

September 23, 2026

BlueKit and the Next Generation of Phishing Infrastructure

In April 2026, researchers called it “still in development.” By June, it was running…

Phishing

September 22, 2026

Callback Phishing: The Attack With No Link to Click

The email contains no malicious URL, no weaponized attachment, and nothing for a security…

Laptop showing a fake florist website with a hidden phishing login page revealed underneath

Threat Intelligence

September 17, 2026

Bizmakers: Phishing Behind Fake Small Businesses

A group we named Bizmakers recently launched dozens of small-business websites. Each one hid…

Hand confirming a bank transfer on a mobile app while a red digital hand guides the action, illustrating authorized push payment fraud

Online Fraud

September 17, 2026

How Impersonation Drives Push Payment Fraud

APP fraud losses in the US could reach $15 billion by 2028. The attacks…

Threat Intelligence

September 15, 2026

GTA 6 Scams Are Running. The Game Isn’t.

Fake Rockstar Games sites started distributing malware one day after leaked footage began circulating.…

Malone Lam pictured over federal court documents with Bitcoin symbols representing the $230 million cryptocurrency theft case

Threat Intelligence

September 10, 2026

The $230 Million Theft That Started With a Phone Call

Malone Lam stole 4,100 Bitcoin by impersonating Google. No systems were breached. No malware…

Mannequin in a business suit facing a red digital wireframe reflection representing deepfake fraud and AI impersonation

Threat Intelligence

September 9, 2026

Deepfake Fraud and the Collapse of Verification

Deepfake-enabled fraud losses reached $3.7 billion through mid-2026, with 89% of that damage recorded…

Corporate office protected by a purple security dome as red cyber threats surround it

Brand Protection

September 8, 2026

Cyber Insurance and the Impersonation Gap

Insurers now require DMARC, MFA, and EDR before they’ll bind a policy. They do…

Phishing

September 3, 2026

“Check the Domain” Is No Longer Advice

A LinkedIn post about a fake Claude download page sparked a debate: was the…

Split human and digital wireframe face representing synthetic identity fraud and fabricated online identities.

Online Fraud

September 2, 2026

Synthetic Identity Fraud and the No-Victim Problem

Synthetic identity fraud accounts for 80% of new account fraud in the US. Losses…

Office desk phone showing a suspicious incoming IT helpdesk call, illustrating a pretexting social engineering attack.

Phishing

September 1, 2026

Pretexting: The Attack That Starts With a Story

The $100 million MGM Resorts shutdown began with a phone call. No malware. No…

Redacted domain ownership records displayed over a suspicious website

Brand Protection

August 28, 2026

Whose Domain Is This?

A company’s own client-facing domain ended up on blocklists, reported by its own security…

See the threats targeting your brand right now

Get a customized assessment showing active impersonation, phishing infrastructure, and exposed credentials specific to your organization. No commitment required.