Author name: Claudia Galingani Mongini

Chief Marketing Officer • social engineer OSINT/SOC/HUMINT • cyberculture • security analyst • polymath • COBOL programmer • nerd • retrogamer

Cybersecurity Insights Phishing Awareness

#PacketHunters – HTML smuggling in Calendar invites (aka the .ics you didn’t inspect)

What looks like a harmless calendar invite can be a hidden delivery system.
Attackers are now embedding base64-encoded HTML payloads inside .ics files — turning “urgent meeting” requests into stealth phishing and credential traps. In this week’s #PacketHunters, we dissect how HTML smuggling works inside calendar invites, how different mail clients handle it, and how to simulate it safely before the attackers do.

Phishing has evolved from simple scams to AI-driven deception. Discover how attackers use OSINT, automation, and prompting — and how to defend against it.
Phishing Awareness

#PacketHunters – From OSINT to AI prompting: the neverending evolution of phishing

There was a time when phishing emails were laughably easy to spot.Misspelled words, broken grammar, the classic “Nigerian prince” asking for a wire transfer. It was clumsy social engineering, and yet, surprisingly effective. Fast-forward to 2025, and phishing has become the most successful cyberattack vector worldwide. Not because it’s sophisticated in the traditional sense, but

Wake up, Neo!
Cybersecurity Insights Phishing Awareness

Your wrist is a vault.. until the vault leaks!

Your smartwatch isn’t just counting steps, it’s quietly building a map of your life. Every heartbeat, sleep cycle, and GPS ping is logged across different apps and clouds, each one a potential breach point. When attackers combine those leaks with phishing emails that mimic trusted brands, the result is more than stolen data: it’s identity exposure, targeted scams, and a perfect playbook for social engineering.

a mIRC client login screen
Opinion / Editorial Phishing Awareness

Decoded: Nerd Thoughts – The Neverending Phish

Once, we were true warriors of the net. No AI copilots, no phishing kits—just skills, instincts, and endless nights on IRC and BBS boards. Back then, scams were about access and reputation, loyalty was sacred, and every trick had to be earned. Fast forward to today: phishing is industrialized, automated, and ethics are gone. Less skill, more damage. And the scariest part? We’ve lost vigilance. That’s why phishing remains a neverending story.

Scroll to Top