Karen Yousefi :verified:

Cyber Security Specialist 
CEO @karenit 
Co-founder @urlabuse

Karen Yousefi :verified: boosted:
NetBlocksnetblocks
2025-06-19

⚠ Update: Metrics show has now been offline for over 12 hours as authorities impose a nation-scale internet shutdown, citing Israel's alleged "misuse" of the network for military purposes; the measure continues to hinder residents' access to information at a critical time

Graph from NetBlocks showing the network connectivity in Iran, from June 6, 2025, to June 19, 2025. The y-axis represents normalized connectivity, ranging from 0% to 100%, and the x-axis represents the dates. The green line representing Iran's connectivity remains stable at around 100% until June 13 when the decline begins with a sharp drop on June 18. The drop in connectivity aligns with escalating conflict by Israel. The minimum and current connectivity levels are indicated as 3% and 3%, respectively. The chart has a dark background.
Karen Yousefi :verified: boosted:
URLAbuse :verified:urlabuse@infosec.exchange
2025-05-31

We’re detecting and monitoring #Chinese #phishing campaigns targeting U.S. #toll systems. In recent days, their activity has noticeably increased, especially within U.S. court systems such as:

• Administrative Office of #Pennsylvania Courts
• New Jersey Courts

We continue to closely track these campaigns and share relevant data with our partners.

#sms #scam #cybersecurity #cybercrime #usa #us #nj #pa #NewJersey #New_Jersey #crime #Court #justice

Karen Yousefi :verified:kyousefi@infosec.exchange
2025-05-14

#Chinese #phishing #campaign activity has expanded across #GCC countries.

At @urlabuse and @karenit, we are detecting and monitoring Chinese phishing campaigns that target U.S. #toll systems. In recent days, their activity has noticeably increased in GCC countries.
🚨a serious warning for residents.

In the #UAE, observed targets include Dubai Police , #Salik , #RAKBANK , Abu Dhabi Mobility , Emirates NBD , and Dubai Electricity & Water Authority - DEWA and etc.
In #Qatar, examples include Hukoomi Qatar (the Government of Qatar’s e-services portal) and Qatar Post .

Since these campaigns are offered as Phishing-as-a-Service (PhaaS), we are not facing a single threat actor — instead, multiple individuals or groups are exploiting this service for their own operations.

We’ve shared the data with our strategic partners and are closely monitoring the campaigns.

#Dubai #AbuDhabi #scam #crime #cybersecurity #post #us #usa #sms

Karen Yousefi :verified:kyousefi@infosec.exchange
2025-03-21

Today, we identified a phishing campaign targeting Salik (Dubai’s road toll system).

We have publicly listed only a small portion of this campaign. Most of the identified domains were registered under .top, .com, .network٫ .guru٫ and world TLDs.

This campaign has been integrated into our detection system, and we are also sharing all identified cases with our partners.

RTA Dubai #dubai #toll #domain #cybersecurity #scam #uae

Karen Yousefi :verified: boosted:
URLAbuse :verified:urlabuse@infosec.exchange
2025-03-13

🚨Today - We’ve detected 4 new #phishing campaigns targeting toll systems and have added them to our detection bot.

Newly Identified Targets:

#WSDOT ( Washington State Department of Transportation )
• Con Edison
• LADOT Parking ( Los Angeles )
#FETC ( Electronic Toll Collection Co., Ltd. )

#toll #scam #cybersecurity #Washington #usa #Los_Angeles #LA #LADOT #Taiwan #NY

Karen Yousefi :verified: boosted:
URLAbuse :verified:urlabuse@infosec.exchange
2025-03-07

We’ve detected three new #phishing campaigns targeting U.S. toll systems and have added them to our detection bot.

Newly Identified Targets:
• North Carolina Turnpike Authority
• Peach Pass ( #Georgia )
#NDOT ( Nevada Department of Transportation )

#toll #scam #cybersecurity #Nevada #usa #Turnpike #crime #dns

Karen Yousefi :verified: boosted:
URLAbuse :verified:urlabuse@infosec.exchange
2025-02-27

Another new Target! This time, phishers have targeted the #Illinois state tollway system (#I_PASS ) and North Dakota Department of Transportation (#NDDOT )

As usual, the majority of cases have been detected on .xin and .vip TLDs.

We have added this #target to our detection system and listed the cases with screenshots on urlabuse.com .

#toll #phishing #scam #usa #domain #cybersecurity

Karen Yousefi :verified:kyousefi@infosec.exchange
2025-02-21

Today, we have added #phishing detections for TxTag (Texas Department of Transportation) and #DriveKS (Kansas Turnpike Authority) to our system.

The majority of detected cases involve .xin and .top domains.

URLAbuse - urlabuse.com

#cybersecurity #scam #texas #TxDOT #Kansas #Payment #toll #usa #domain #Turnpike #TxTag

Karen Yousefi :verified: boosted:
URLAbuse :verified:urlabuse@infosec.exchange
2025-02-18

🚨Our system now includes #phishing detections for Dubai Police🇦🇪.

The majority of detected cases involve .live, .top, and .com domains

urlabuse.com

#Dubai #crime #cybersecurity #scam #UAE #emirates

Karen Yousefi :verified: boosted:
URLAbuse :verified:urlabuse@infosec.exchange
2025-02-16

We have added #phishing detections for Pennsylvania Turnpike Commission to our system.

URLAbuse - urlabuse.com

#scam #toll #Pennsylvania #Turnpike #usa
#cybersecurity #us #pa #ezpass

Karen Yousefi :verified: boosted:
URLAbuse :verified:urlabuse@infosec.exchange
2025-02-15

‼️We identified a #phishing #campaign targeting Varo Bank and listed the associated malicious URLs.

urlabuse.com

#cybersecurity #scam

Phishing pageURLAbuse
Karen Yousefi :verified: boosted:
URLAbuse :verified:urlabuse@infosec.exchange
2025-02-12

Overview of #phishing campaign attacks targeting electronic toll in the U.S

It’s been almost three weeks since we started identifying and listing phishing attacks targeting electronic #toll Roads systems in the U.S. on URLAbuse.

We’ve come across some interesting findings, which you can check out at the link below.

team.urlabuse.com/news/overvie

#EZDriveMA #EZDrive #us #usa #scam #cybersecurity #crime #California
#sunpass #Florida #EZPass #NewYork

Karen Yousefi :verified: boosted:
URLAbuse :verified:urlabuse@infosec.exchange
2025-01-27

Since 2 days ago, we have added #phishing detections for #EZDriveMA and #thetollroads to our system. So far, we have identified over ~4k cases and publicly listed more than +3k of them.

As usual, the majority of cases have been detected on .top and .xin domains.

urlabuse.com

#EZDrive #us #usa #scam #cybersecurity #crime #California #Massachusetts #MassDOT #SMS

Karen Yousefi :verified:kyousefi@infosec.exchange
2024-12-13

We have identified and listed a substantial #phishing #campaign targeting government entities in the #UK and #Australia.

To date, approximately ~1,300 domains have been listed.

Comprehensive reports will be published in the near future.

urlabuse.com

#cti #security #cybersecurity #crime

Karen Yousefi :verified:kyousefi@infosec.exchange
2024-09-26

An Overview of the World's Largest #Postal Services #Phishing Campaign

Over the past two weeks, @urlabuse has been closely monitoring phishing campaigns targeting over 50 postal services worldwide, including national and private postal companies.

We’ve prepared an intriguing overview.

team.urlabuse.com/news/overvie

Karen Yousefi :verified: boosted:
URLAbuse :verified:urlabuse@infosec.exchange
2024-09-06

🚨 Breaking New Ground in Phishing Detection! 🚨
We've uncovered the largest phishing campaign targeting 50+ postal services globally! Thousands of domains registered daily, primarily in .Top

Find out how we’re tracking it all with new tools in real-time.

Read the full story:
news.urlabuse.com/largest-post

#CyberSecurity #Phishing #TechNews #Postal #campaign #internet #safety

Karen Yousefi :verified: boosted:
2024-07-19

Major issue with CrowdStrike Falcon Sensor causing massive Windows 10 outages globally.

Fleets of 50k+ machines stuck in BSOD loop. 70%+ laptops down in some orgs.

Workaround:
1. Safe Mode
2. Delete C:\Windows\System32\drivers\CrowdStrike\C-00000291*.sys
3. Reboot

Regions impacted: EU-1, US-1, US-2, US-GOV-1, AU, MY, NZ

Check systems & invoke IR plans ASAP!

#CrowdStrikeCrisis #Windows10BSOD

Karen Yousefi :verified:kyousefi@infosec.exchange
2024-07-17

We've taken a stand against Internet abuse! 🚫🕵️‍♂️ URLAbuse filed a complaint that led to ICANN issuing a Notice of Breach to the .TOP Registry Operator.

Discover the details on our news website.

news.urlabuse.com/ICANN-Issued

Karen Yousefi :verified: boosted:
URLAbuse :verified:urlabuse@infosec.exchange
2024-06-05

🚨 Major Cyber Campaign Uncovered in the UAE! 🚨

Urlabuse.com has identified a sophisticated phishing campaign targeting major entities in the UAE, including du, RTA, and Etisalat. This significant breakthrough underscores the critical importance of robust cybersecurity measures.

🔍 Discover more about our findings and stay informed:

team.urlabuse.com/news/URLAbus

#CyberSecurity #Phishing #UAE #Urlabuse #CyberThreats #StaySafeOnline

Karen Yousefi :verified:kyousefi@infosec.exchange
2024-05-26

Over the past few days, our team at @urlabuse successfully identified and listed a sophisticated phishing campaign targeting du . This campaign also included phishing attempts against RTA and Etisalat. Notably, the hosting company this campaign is based in Dubai Internet City, a renowned free zone for tech companies.

Our powerful detection engine continues to demonstrate its effectiveness in combating cyber threats.

urlabuse.com

phishing campaign targeting du

Client Info

Server: https://mastodon.social
Version: 2025.04
Repository: https://github.com/cyevgeniy/lmst