Latest research
Phishing teardownFeaturedThe phishing page that loads the real login
An adversary-in-the-middle kit doesn't fake your sign-in screen — it proxies the genuine one in real time and walks off with the session your password and MFA just created. A sanitized teardown of how it works and what stops it.
More teardowns in progress — cloaking gates, credential relays, and the infrastructure behind them.
About Cydra. Independent threat research focused on phishing infrastructure and evasion. Everything we publish is sanitized — indicators, brands, and keys are withheld and shared through the proper channels first.