#Proofpoint
LightNews LightNews
doublepulsar.com
ICE is Microsoft and Proofpoint hosted btw.
January 2, 2026 at 11:54 PM
selenalarson.bsky.social
Hey new followers, here’s my intro: I do threat research with a focus on cybercrime and I host two security podcasts

Discarded www.proofpoint.com/us/podcasts/...

Only Malware in the Building thecyberwire.com/podcasts/onl...

I run a lot and have a dog named Ben. Working to make the world better
DISCARDED | Proofpoint | Proofpoint US
www.proofpoint.com
November 11, 2024 at 1:58 PM
saffronsec.bsky.social
My first blog with Proofpoint is live! And we love a good crossover. State-sponsored actors try their hand at ClickFix - the hottest thing in cybercrime. Meet the North Koreans, Iranians, and Russians who are upping their social engineering game www.proofpoint.com/us/blog/thre...
Around the World in 90 Days: State-Sponsored Actors Try ClickFix | Proofpoint US
Key Findings While primarily a technique affiliated with cybercriminal actors, Proofpoint researchers discovered state-sponsored actors in multiple campaigns using the ClickFix social
www.proofpoint.com
April 17, 2025 at 11:12 AM
asherwolf.bsky.social
Proofpoint warns of myGov & invoice scams in Australia securitybrief.com.au/story/proofp...
Proofpoint warns of myGov & invoice scams in Australia
Australians lost AUD $2.18 billion to scams in 2025 as fake myGov logins and bogus invoices exploit tax-season urgency, Proofpoint said.
securitybrief.com.au
August 18, 2026 at 1:02 AM
selenalarson.bsky.social
New episode of DISCARDED where we sit down with the 🐐 Mark Kelly, our lead China analyst, to talk all things China APT! Tune in wherever you get your podcasts. 🔮

Web: www.proofpoint.com/us/podcasts/...

Apple: podcasts.apple.com/us/podcast/d...

Spotify: open.spotify.com/episode/2AtJ...
DISCARDED | Proofpoint | Proofpoint US
www.proofpoint.com
December 4, 2024 at 12:38 AM
pylos.co
From @selenalarson.bsky.social et al at Proofpoint - TOAD!
March 11, 2025 at 1:54 PM
campuscodi.risky.biz
Proofpoint identified a new MacOS malware delivered via web inject campaigns that our researchers called FrigidStealer

www.proofpoint.com/us/blog/thre...
An Update on Fake Updates: Two New Actors, and New Mac Malware | Proofpoint US
Key findings  Proofpoint identified and named two new cybercriminal threat actors operating components of web inject campaigns, TA2726 and TA2727.  Proofpoint identified a new
www.proofpoint.com
February 18, 2025 at 3:04 PM
pivotcon.bsky.social
"California Dreaming: Hunting and Disrupting a Sophisticated Fraud Actor"

Selena Larson ( @selenalarson.bsky.social ) , Staff Threat Researcher, ProofPoint
Jake Gionet, Senior Threat Researcher, ProofPoint
2/18
March 7, 2025 at 2:42 PM
saffronsec.bsky.social
Most exciting @threatinsight.proofpoint.com drop yet - in collaboration with NSA - and the product of @greg-l.bsky.social's blood, sweat, and tears. Research into two Russian actors throwing half-click exploits against mailservers. Part 1 on TA488 / Void Blizzard
www.proofpoint.com/us/blog/thre...
TA488 Targets Zimbra Mailservers with Half-Click Exploits | Proofpoint US
Proofpoint is releasing this report in coordination with NSA and FBI’s JSAC reporting about TA488/Void Blizzard, which can be found here. This is part 1 of a 2-part blog series Proofpoint is
www.proofpoint.com
July 23, 2026 at 2:12 PM
maysuser.name
proofpoint outage? on a friday? more likely than you'd think
August 14, 2026 at 1:10 PM
threatinsight.proofpoint.com
The tool has been released in the Proofpoint Emerging Threats public #GitHub for other defenders to leverage.

Learn more about it here: brnw.ch/21wWSH0

#PDF #threatdetection #cyberthreat
Proofpoint releases innovative detections for threat hunting: PDF Object Hashing | Proofpoint US
Key findings Proofpoint created a new open-source tool for creating threat detection rules based on unique characteristics in PDFs called “PDF Object Hashing”.  This technique can
brnw.ch
October 23, 2025 at 6:05 PM
threatinsight.proofpoint.com
Proofpoint has directly observed a targeted email campaign that delivers DarkSword RCE, and we attribute the messages to Russian FSB threat actor TA446 with high confidence. 🧵
March 27, 2026 at 4:26 PM
campuscodi.risky.biz
What that Proofpoint research is actually talking about, is this:

github.com/yudasm/WHfB-...
August 14, 2025 at 8:36 AM
selenalarson.bsky.social
It’s tax season so of course I’m blogging the scams www.proofpoint.com/us/blog/thre...
Security Brief: Threat Actors Take Taxes Into Account | Proofpoint US
What happened  Proofpoint researchers have identified an uptick in campaigns and malicious domains impersonating tax agencies and related financial organizations. This activity aligns with
www.proofpoint.com
January 28, 2025 at 10:43 PM
selenalarson.bsky.social
Thank you SC Media for nominating me as a Woman to Watch in the Women in IT Security program ✨ www.scworld.com/feature/from...
Proofpoint's Selena Larson moves from the news desk to the threat analyst's chair
Selena Larson parlayed a career in cybersecurity journalism to an analyst position at Proofpoint.
www.scworld.com
November 13, 2024 at 7:00 PM
selenalarson.bsky.social
Happy Halloween from me and Proofpoint threat research!
October 31, 2023 at 8:38 PM
cloudflare.social
From June 2025 through July 2025, the Cloudflare Email Security team has been tracking a cluster of cybercriminal threat activity leveraging Proofpoint and Intermedia link wrapping to mask phishing payloads. Read more: cfl.re/4lUXBEE
Attackers abusing Proofpoint & Intermedia link wrapping to deliver phishing payloads
Attackers are exploiting Proofpoint and Intermedia link wrapping to mask phishing payloads.
cfl.re
July 30, 2025 at 1:54 PM
selenalarson.bsky.social
Next week I'll be doing a lil webinar alongside some of our exec team if you'd like to hear me talk about the threat landscape and what I think the future holds 🔮 go.proofpoint.com/PowerSeriesD...
Proofpoint Power Series: Year in Review and Predictions
Find out how Proofpoint helps protect people, data and brands against the latest cyber attacks. Offering cyber security and compliance solutions for email, web, cloud, and social media.
go.proofpoint.com
December 2, 2024 at 4:29 PM
angealbertini.bsky.social
Interesting infection chain using polyglots: www.proofpoint.com/us/blog/thre...
Call It What You Want: Threat Actor Delivers Highly Targeted Multistage Polyglot Malware | Proofpoint US
Key findings  Proofpoint researchers identified a highly targeted email-based campaign targeting fewer than five Proofpoint customers in the United Arab Emirates with a distinct
www.proofpoint.com
March 6, 2025 at 7:59 AM
nickattfield.bsky.social
Dropping some new research on TA397/Bitter 🚨

Hidden in Plain Sight | TA397’s New Attack Chain Delivers Espionage RATs

Report:
www.proofpoint.com/us/blog/thre...
Hidden in Plain Sight: TA397’s New Attack Chain Delivers Espionage RATs | Proofpoint US
Key findings  Proofpoint observed advanced persistent threat (APT) TA397 targeting a Turkish defense sector organization with a lure about public infrastructure projects in Madagascar.   The attack...
www.proofpoint.com
December 17, 2024 at 12:10 PM
Looks like they are spamming you through proofpoint.com email relay services. Complain to them publicly and see if proofpoint stops them. A letter from a laywer to abuse@proofpoint.com might do something also. You know any laywers? :)
Enterprise Cybersecurity Solutions, Services & Training | Proofpoint US
Proofpoint helps protect people, data and brands against cyber attacks. Offering compliance and cybersecurity solutions for email, web, cloud, and more.
proofpoint.com
November 8, 2024 at 2:11 AM
threatinsight.proofpoint.com
🚨 New threat research: Proofpoint identified a likely North Korea-aligned threat cluster, UNK_DeadDrop, targeting software developers through trusted development platforms and workflows.

Read the blog: www.proofpoint.com/us/blog/thre....
Don't Fear the Repo: UNK_DeadDrop Phishing Campaign Targets Developers to Steal Cryptocurrency | Proofpoint US
By Saher Naumaan, Carlos Rubio, and the Proofpoint Threat Research Team Key Findings Between April and May 2026, Proofpoint Threat Research observed a likely North Korean threat actor
www.proofpoint.com
June 9, 2026 at 2:51 PM
malwarejake.bsky.social
I'm catching up on news and see none other than @selenalarson.bsky.social.

Fantastic work Selena!
cyberscoop.com/tycoon-2fa-p...
Selena Larson, staff threat researcher at Proofpoint who provided a formal declaration in support of the court order, said Tycoon 2FA was responsible for the highest volume of adversary-in-the-middle phishing attacks observed by Proofpoint. “Tycoon was the biggest MFA phishing threat in our data, and we anticipate seeing a significant decrease after this operation,” she told CyberScoop. “Many customers will find their hacking tool is no longer working, and even if Tycoon 2FA is able to create new domains and infrastructure, the brand will be significantly harmed, with customers either purchasing less effective phishing kit, or potentially rethinking their life choices and getting out of the game,” Larson added.
March 8, 2026 at 6:53 PM
kikta.net
59. Farmers Insurance
60. TransUnion
61. LVMH
62. Kering
63. Salesloft
64. Cloudflare
65. Zscaler
66. Palo Alto Networks
67. Tenable
68. CyberArk
69. Elastic
70. BeyondTrust
71. Proofpoint
72. JFrog
73. Rubrik
74. Cato Networks
75. Workiva
76. UK Legal Aid Agency*
77. Jaguar Land Rover
78. Toyota
September 24, 2026 at 2:41 AM
campuscodi.risky.biz
Proofpoint joins the list of infosec firms impacted by the Salesloft Drift breach:

www.proofpoint.com/us/blog/corp...
Salesloft Drift Supply Chain Incident Response | Proofpoint US
Last week, Proofpoint was notified by Salesforce of suspicious activity related to the third-party Drift application, published by Salesloft. This activity indicated potential unauthorized access
www.proofpoint.com
September 3, 2025 at 11:06 PM