Free Online Panel Examines Rising Omnichannel Scams and Multichannel Fraud Tactics
The Brazilian human risk management company Eskive will host the third edition of its free online panel focused on omnichannel cyber fraud on August 18 at 11 a.m. The event, titled the 3rd Eskive Panel on Cybercrime and Omnichannel Scams, brings together specialists to examine how attackers increasingly combine multiple communication channels to deceive victims.
While many internet users have learned to spot basic single-channel attacks such as phishing or smishing, fraudsters are now deploying coordinated campaigns that use two, three, or more channels simultaneously. These omnichannel tactics create more believable narratives and significantly raise the success rate of social-engineering attempts.
The panel will be moderated by Priscila Meyer, CEO of Eskive and a specialist in human risk management. Confirmed speakers include Thiago Bordini, who brings more than 20 years of experience in cyber threat intelligence, and Elias Edenis, a cybercrime investigator with the Santa Catarina Civil Police and instructor at ACADEPOL/SC.
Attendees will receive practical recommendations drawn from real-world simulations conducted with Eskive clients. The sessions will also include live audience interaction, question-and-answer segments, and quizzes to reinforce key learning points.
Registration for the live broadcast is available through the official Eskive event link. The discussion is intended to help executives and security teams better prepare their organizations for the evolving landscape of multichannel digital fraud.
Related articles
VC.ru Blocks Lawyer's Account After Article Exposing In-Platform Phishing Scheme
A Russian lawyer specializing in IT law and cryptocurrency regulation published an article on VC.ru detailing a phishing operation that abused the platform's own articles. The scheme involved posting seemingly legitimate content that later had links altered to redirect users to fake services stealing crypto assets. Within an hour of publication, the author's four-year-old account was automatically blocked under rules prohibiting multiple accounts to evade bans, despite the author having no prior restrictions or secondary accounts. After formal complaints citing Russian data protection law 152-FZ and consumer protection statutes, the platform reversed the ban but initially reclassified the account as commercial, demanding a monthly fee of 56,000 rubles for indexing. The account status was later restored following further legal correspondence. The incident highlights platform moderation challenges when reporting security threats involving paid accounts on the same site.
Email Graph Analysis Detects Impersonated Suppliers When DKIM and SPF Pass
Security researchers have outlined a practical method to identify business email compromise attempts that bypass traditional authentication checks. The approach relies solely on metadata from mail server logs to build communication profiles between external and internal addresses. By tracking first contact, one-way traffic, dormant periods, unusual sending hours, and domain similarity, analysts can flag high-risk messages requesting payment changes. The technique works against mailbox takeover scenarios where attackers reuse legitimate threads and valid signatures. Implementation uses existing Postfix or Microsoft Exchange logs and requires no new infrastructure beyond daily exports. A simplified version focusing only on lookalike domain detection can be built in a single evening and still catches most supplier impersonation attempts.
Developer Releases PhishIntel Open-Source Tool for Phishing Site Analysis and Risk Scoring
A developer has published PhishIntel, a lightweight Python-based OSINT application designed to analyze domains and evaluate phishing risk. The tool performs extensive checks including domain structure analysis, DNS records, RDAP and WHOIS data, TLS certificates, HTTP redirects, page content, security headers, and JavaScript static analysis. It generates structured JSON reports containing risk scores with explanatory indicators. Optional integrations with VirusTotal, Google Safe Browsing, URLhaus, Nmap, Nuclei, ZAP, and Playwright enable reputation checks, dynamic browser analysis, and active scanning. The project aims to help identify suspicious sites used in schemes such as the recent fake fuel sales campaign that defrauded victims of at least 3.7 million rubles. The author invites feedback from security professionals to improve the codebase.
Russian Court Bans Advertising for Renting and Selling Third-Party Bank Cards
The Chertanovsky District Court of Moscow has ruled that information promoting the rental and sale of other people's bank cards is prohibited for distribution in Russia. The decision targets a website and two Telegram channels that offered users the chance to temporarily lend or permanently sell their cards to third parties. Such schemes are commonly used to recruit drops who help receive, transfer, and cash out stolen funds. The court found that these proposals violate the rights and legitimate interests of citizens. Owners of the resources could not be identified, and domain registrars were foreign companies. VTB had previously warned about these schemes in 2024, noting that card owners risk ending up on bank blacklists, losing access to financial services, and facing criminal charges. The Ministry of Internal Affairs has also highlighted that transferring bank cards and accounts to outsiders can lead to criminal liability, with fraudsters particularly targeting children and teenagers.