From Fraud in the Wild to Fraud in the Agent Layer: A Two-Part Series

What You'll Learn

Most vendors take down a scam and close the case. In this two-part series, the ZeroFox Signals Research team shows what comes after the first takedown, and where fraud is heading next.

Part 1: Pulling the Thread. A single flagged link is rarely the whole threat. It usually leads to a domain with related domains running phishing, BEC, fake support lines and WhatsApp lures across six or seven platforms. Using a composite case built from real casework, the team shows how they trace that network, hold evidence to one standard, and get takedowns done across providers that each have their own rules and timelines.

Part 2: Fraud in the AI Agent Layer. AI agents need identity and discovery infrastructure. That infrastructure is being built now, and fraud is already using it. The team will share the brand impersonation they’ve found there, which sectors are being targeted, and scored findings from their monitoring. Other vendors are writing about this layer. ZeroFox is already working in it.