Jainam Shah

This report uncovers active abuse of the ip6.arpa namespace. This technique bypasses traditional security controls, renders blocklists ineffective, and highlights a critical blind spot in DNS and email security. Proactive DNS anomaly detection and monitoring of staged infrastructure are essential to mitigate this emerging threat.

CloudSEK’s latest investigation exposes a rapidly evolving fraud ecosystem targeting Canadians through highly convincing impersonation of government services and trusted national brands. From fake traffic fines and tax refunds to airline bookings and parcel delivery alerts, attackers are scaling operations using shared infrastructure and phishing-as-a-service models. The report reveals how urgency and institutional trust are weaponized—and what organizations must do to stay ahead.