{"success":true,"data":{"id":"fake-security-researcher-cve-poc-lure","label":"Fake CVE proof-of-concept / security researcher lure — claims to share a PoC exploit or malware sample for a real CVE under a \"responsible disclosure\" deadline, delivering a ZIP/RAR dropper disguised as a research artifact. CISA 2026 PoC-lure advisory; Cofense red-team-lure campaign 2025-2026.","description":"Phishing / spear-phishing emails impersonating security researchers sharing a CVE proof-of-concept exploit or malware sample under a fake \"responsible disclosure\" deadline, delivering a ZIP/RAR dropper or credential-harvest portal. Three-part detection: (1) CVE-YYYY-NNNNN identifier, (2) proof-of-concept / PoC / exploit-download / malware-sample language or archive attachment, (3) responsible-disclosure / coordinated-disclosure / 72h-window urgency, no List-Unsubscribe. CISA 2026 PoC-lure advisory; Cofense red-team-lure campaign 2025-2026 targeting security professionals.","tier":"danger","category":"scam","isThin":false}}