@arsen

🛡️ Security Awareness for the age of AI. AI-driven training against voice phishing, deepfake impersonation, and advanced phishing.

 Global
arsen.co/en
Joined March 2020
  • Tweets310
  • Following214
  • Followers365
139Media
Your CEO just sent you a Teams invite. It isn't your CEO. Arsen now runs deepfake CEO fraud video call simulations built on your own leaders. 🧵 arsen.co/en/deepfake-fraud-s…
1
2
2
3
499
Under the EU's PSR, payment providers must fully refund fraud where a scammer poses as their staff. Verification of payee won't stop a customer who was persuaded to pay. Your front line is now part of the control set. arsen.co/en/blog/psd3-psr-so…

PSD3, PSR and IPR: Social Engineering Compliance Guide

PSD3 and PSR shift fraud liability to payment providers. What the new EU rules require, and how to build the human controls they depend on.

arsen.co
1
29
Your next phishing simulation might already be sitting in your inbox. With Arsen, turn real-world emails into custom phishing scenarios. Upload or forward an email, get an editable draft, and build more realistic employee training in less time. arsen.co/en/blog/phishing-em…

Phishing Email Import: Build Scenarios From Real Emails

Turn a real email into a phishing simulation scenario in Arsen: upload an EML, EMLX or MSG file, or forward the email, then review and edit the draft.

arsen.co
3
25
Over 15% of reported cybercrime losses stem from Business Email Compromise (BEC), according to the @FBI's 2024 Internet Crime Report. With Arsen, simulate phishing from your own domain and test whether employees verify sensitive requests. arsen.co/en/blog/bec-simulat…

BEC Simulations: Phishing Training From Your Own Domain

Run business email compromise simulations sent from a verified domain your organization owns, delivered through your Microsoft or Google API integration.

arsen.co
2
39
A fake CAPTCHA asks your employee to paste a command. Seconds later, an infostealer is running. ClickFix attacks rose 517% in 2025. Arsen lets you simulate them on your teams, so you can see who'd fall for it before attackers do. arsen.co/en/blog/clickfix-at…
1
1
4
150
53% of corporate deepfake fraud incidents in H1 2026 were video-only, according to @resembleai. Your teams can't build a reflex for an attack they've never faced.
1
3
111
So our simulations mirror the real thing: 🎯 Your own executives, deepfaked. Not generic avatars 📅 Invites and calls in replicated Teams, Google Meet, and Zoom environments arsen.co/en/deepfake-fraud-s…
2
156
$3.05 billion. That’s what U.S. organizations reported losing to business email compromise in 2025, the second-costliest cybercrime, according to the FBI. Learn how Arsen helps you build ultra-realistic BEC simulations to train your team to detect such compromise attempts.👇
1
2
124
arsen.co/en/blog/bec-simulat…

BEC Simulations: Phishing Training From Your Own Domain

Run business email compromise simulations sent from a verified domain your organization owns, delivered through your Microsoft or Google API integration.

arsen.co
30
🚨 CONFIRMED: @apolloglobal was breached following an intense vishing extortion operation targeting private equity firms. Read our complete report below. 👇 arsen.co/en/blog/private-equ…

Private Equity Cybersecurity: How a Vishing Attack Works

Google's UNC6671 analysis shows help desk vishing hitting private equity and financial services. The attack chain, the targeting shift, and the defenses.

arsen.co
Finance News
@ftfinancenewsAug 21
Apollo says hackers accessed personal data in latest Wall Street breach ft.trib.al/dlhLvZO

Apollo says hackers accessed personal data in latest Wall Street breach

Alternative asset manager’s probe determined names, home addresses and social security numbers were stolen in cyber attack last month

ft.com
1
1
2
171
☎️ Discover the power of conversational AI and test your instincts against realistic voice phishing with Arsen Security: arsen.co/en/platform/vishing…

Vishing Simulation with AI Voice Cloning

Discover our voice phishing attacks simulations. Using our AI vishing technology, you can now evaluate and train against vishing, at scale.

arsen.co
1
42
Another week, another fresh batch of corporate vishing victims! ☎️ Here’s your weekly roundup of the latest social engineering and human defense news. linkedin.com/pulse/weekly-cy…

Weekly Cyber Digest - Week of August 17, 2026

🔥 Hot News: Vishing Takes Down Phone Company, Exposing 1.6M Records RingCentral has suffered a significant data breach, losing 1.

linkedin.com
1
61
Citadel, Two Sigma, Point72 and Millennium were targeted in a coordinated voice phishing campaign. No malware. No zero-day. Attackers called employees and asked for access. Read the full breakdown 👇 arsen.co/en/blog/hedge-funds…

Hedge Funds Hit by AI Vishing Attacks: What CISOs Must Do

Citadel, Two Sigma, Point72 and Millennium were targeted in a vishing wave in August 2026. What happened, why funds, and the controls to put in place.

arsen.co
2
121
🔥 This week in the news: - @binance's CSO: employees who repeatedly fail phishing tests will be fired! - @CrowdStrike flags surge in vishing - @okta shares a full BTS of a vishing operation - @ChatGPT joins the top 10 most impersonated brands in phishing shorturl.at/C2w7z
2
59
ClickFix and vishing attacks are evolving fast, making social engineering an ever growing threat. See the latest campaigns uncovered by @msftsecurity, @GroupIB & @kaspersky; and how @arsen helps train your team. 👇 linkedin.com/pulse/weekly-cy…

Weekly Cyber Digest - Week of July 20, 2026

Here's the latest social engineering & cyber defense news, from Arsen Security and the world! 🔥 Hot News: ShinyHunters Exploits Salesforce OAuth The ShinyHunters group has been actively exploiting...

linkedin.com
1
83
🚨 @okta details a vishing campaign where @Microsoft365 users are tricked into enrolling attacker-controlled Entra passkeys. Time to test these workflows with company-scale vishing simulations. 👇okta.com/en-au/blog/threat-i…

Vishing actors target Entra passkey enrollment | Okta Threat Intelligence

okta.com
1
84
Think you're safe from vishing? With AI making voice impersonation easier than ever, attackers are just one phone call away. Try our playground for free and find out how secure you really are. arsen.co/en/resources/ai-voi…

AI Voice Phishing Playground: Try a Vishing Call

Think you're safe from vishing? Try our simulation in a controlled environment for free and find out how secure you really are.

arsen.co
37
💡ClickFix is a type of social engineering attack that makes people run malware on their own without the attacker needing to use an exploit. Learn more: arsen.co/en/resources/clickf…

What Is a ClickFix Attack? How It Works & How to Stop It

ClickFix tricks users into running malware themselves via fake error prompts. Learn how it works, who it targets, and how to defend against it.

arsen.co
Unit 42@Unit42_IntelJul 6
We are tracking a MaaS #ClickFix operation using Polygon #blockchain as a resilient C2 config store. So far, 130+ compromised sites with 15 rotating C2s. Victim telemetry is periodically exfiltrated and stage 3 execution drops an infostealer. Details at bit.ly/4fmKZ8g
Code snippets from left to right: "Blockchain for C2 fetching" shows JavaScript code for obtaining servers and fetching data from a blockchain. "Screenshot Exfiltration" includes code for capturing and sending screenshots to a server. "Dynamic Clipboard Payload Injection" demonstrates code for injecting and executing clipboard content. Each section is annotated to highlight its purpose.

ALT Code snippets from left to right: "Blockchain for C2 fetching" shows JavaScript code for obtaining servers and fetching data from a blockchain. "Screenshot Exfiltration" includes code for capturing and sending screenshots to a server. "Dynamic Clipboard Payload Injection" demonstrates code for injecting and executing clipboard content. Each section is annotated to highlight its purpose.

The image displays a screenshot of computer code with annotations. It includes highlighted text pointing to the "Rotating C2 domains," "ClickFix Lure," and "Clipboard payloads."

ALT The image displays a screenshot of computer code with annotations. It includes highlighted text pointing to the "Rotating C2 domains," "ClickFix Lure," and "Clipboard payloads."

The image shows a screenshot of the JokerStat operator login page. It features fields for email address and password and a human verification challenge. Text annotations note "One of the 15 C2 domains," "Every C2 domain runs the same clone," and "Support for MaaS kit." A smaller overlay mentions Telegram support.

ALT The image shows a screenshot of the JokerStat operator login page. It features fields for email address and password and a human verification challenge. Text annotations note "One of the 15 C2 domains," "Every C2 domain runs the same clone," and "Support for MaaS kit." A smaller overlay mentions Telegram support.

85
Your finance teams are under attack. AI-assisted voice phishing and deepfake calls are driving fraudulent transfer approvals. Awareness isn't enough. Train the right reflex. arsen.co/en/blog/financial-s…

Why Train Financial Services Teams Against Vishing

Two real cases show how AI voice phishing and deepfakes tricked finance teams into wiring $60M. See the attack flow and how to train against it.

arsen.co
1
62
Load more