Understanding the threat is the first step in protecting yourself and others.
Cyber threats are not just technical; they are human. Attackers use a mix of technical tools and social pressure to reach their goals. The same public information that helps defensive researchers also helps attackers. My work focuses on understanding these threats so they can be prevented and reported.
Deceptive messages that trick people into revealing credentials, installing malware, or sending money. Protection: verify senders, use MFA, and avoid suspicious links.
Manipulating people into breaking normal procedures. Attackers research a target online, then impersonate someone trusted or create urgency.
Publicly posting private information to harass, intimidate, or enable further attacks. Prevention: reduce your public footprint and respond quickly.
Creating fake accounts or websites that look like a real person or organization. Victims may be tricked into sending money or information.
Software designed to steal data, damage systems, or demand payment. Keep software updated, back up data, and avoid untrusted downloads.
False emergency reports that send armed responders to a victim's location. It is a life-safety crime often enabled by doxxing.
