# EverydaySecurity

Most scams stay invisible until the money's already gone. We surface them while there's still time to act.

## Scams

- [Adaptive Phishing Kits: Device- and Location-Aware Scams](https://everydaysecurity.ai/security-research/adaptive-phishing-kits/): Adaptive phishing kits inspect the visiting device, location, and time before deciding how to attack — the same link can steal a password on one device and install malware on another.
- [AI Vibe-Coding Tools Used to Build Scam Sites](https://everydaysecurity.ai/security-research/ai-built-scam-sites/): Scammers are using consumer AI app-builders to stand up convincing brand-impersonation sites in hours instead of weeks, then pairing them with paid social ads to borrow the impersonated brand's trust.
- [Malware Distributed Through Fake Trading Platforms](https://everydaysecurity.ai/security-research/fake-platform-malware/): Some fake trading-platform sites aren't after your deposit at all — the platform itself is the delivery mechanism for malware that steals banking credentials and government ID.
- [Government & Business-Filing Impersonation Scams](https://everydaysecurity.ai/security-research/government-filing-impersonation/): Government-filing impersonation scams use a business's own public filing data — LLC registration numbers, trademark serial numbers — to send fake compliance notices that look official enough to pay.
- [Phishing Pages Hosted on Free Website Builders](https://everydaysecurity.ai/security-research/phishing-via-free-website-builders/): Some phishing kits don't need a server, a domain, or anywhere of their own to send stolen passwords — a free account on a consumer website builder can supply hosting, the fake login form, and the credential-delivery channel all at once.
- [Recruiting Scams: Compromised Accounts and the AI-Text Tell](https://everydaysecurity.ai/security-research/recruiting-scams-and-the-money-trail/): Recruiting scams increasingly run through compromised legitimate recruiter accounts, and the follow-up messages often carry statistical tells of AI-generated text worth learning to spot.
- [Verifying Before Reporting: Our Investigation Methodology](https://everydaysecurity.ai/security-research/verifying-before-reporting/): Not everything that looks like a scam is one. This page documents how we verify before we call something a scam — including a case where we retracted an earlier call, and a false-positive detection from the technical side.

## AI Security

- [Reverse-Proxy Exchange Phishing: A Technical Investigation](https://everydaysecurity.ai/security-research/exchange-clone-phishing-deep-dive/): Reverse-proxy phishing kits don't clone an exchange's frontend — they transparently proxy the real one, intercepting only credentials while every other system, including the exchange's own fraud detection, runs exactly as it would for a legitimate session.
- [How Scammers Hide Their Infrastructure](https://everydaysecurity.ai/security-research/how-scammers-hide/): Scam infrastructure relies on the same anonymity and evasion techniques regardless of the scam on top of it — CDN-based anonymity and bot-detection evasion are two distinct hiding techniques worth recognizing separately.

## Blog

- [EverydaySecurity Blog](https://everydaysecurity.ai/blog/): Longer-form, human-readable posts — distinct from the topic pages above.
- [The Gentleman is a Bot and a Thief.](https://everydaysecurity.ai/blog/angelvanguard-scam/)

## Events

Events are managed on our public Luma calendar, not on this site: [https://luma.com/calendar/manage/cal-XE4K4cBxArCoZxI](https://luma.com/calendar/manage/cal-XE4K4cBxArCoZxI)