Thomas Le Coz

Thomas Le Coz

About Thomas Le Coz

Social engineering expert, Thomas is the co-founder of Arsen.

After contributing to the development of the first versions of Arsen’s available features, he now oversees sales and marketing operations.

He shares the results of his research through Arsen’s blog articles on all topics related to social engineering attacks (phishing, smishing, vishing), as well as the impact of AI on them.

Read our editorial standards and transparency page for editorial and corrections information.

Thomas Le Coz Latest Posts

Private Equity Cybersecurity: Inside the UNC6671 Vishing Extortion Scheme

Private Equity Cybersecurity: Inside the UNC6671 Vishing Extortion Scheme
Thomas Le Coz
Vishing

Google Threat Intelligence Group published an analysis of UNC6671, a cluster of extortion operations running help desk vishing against financial services, private equity, and professional services...

Hedge Funds Targeted by Vishing: Inside the Wave That Hit Citadel, Two Sigma and Point72

Hedge Funds Targeted by Vishing: Inside the Wave That Hit Citadel, Two Sigma and Point72
Thomas Le Coz
Vishing

A coordinated wave of voice phishing targeted several of the world's largest hedge funds. No malware. No zero-day. Attackers picked up the phone and called employees. Vishing is now a...

Crypto Token Compromise: Why Humans Are the Prime Entry Point

Crypto Token Compromise: Why Humans Are the Prime Entry Point
Thomas Le Coz
Email Cybersecurity

A recent token compromise shows the real attack surface of a Web3 and crypto business is its people. Here's the social engineering sequence and how to defend against it.

Cybersecurity Awareness Training for MiCA Compliance: Managing Human Risk for Crypto Services

Cybersecurity Awareness Training for MiCA Compliance: Managing Human Risk for Crypto Services
Thomas Le Coz
Social Engineering

MiCA institutes uniform EU market rules for crypto-assets and requires CASPs to run cybersecurity measures aligned with DORA, prove staff competence, and document ICT and human-risk safeguards....

Microsoft 365 and Azure Social Engineering Threats You Need to Know About

Microsoft 365 and Azure Social Engineering Threats You Need to Know About
Thomas Le Coz
Social Engineering

The FBI and Microsoft both flagged active attacks against M365 and Azure in May 2026. Both bypass MFA. Neither uses malware. Both start with social engineering.

Why Vishing Has Become the Main Cyber Threat, And What to Do About It

Why Vishing Has Become the Main Cyber Threat, And What to Do About It
Thomas Le Coz
Vishing

Vishing has overtaken email phishing as the go-to attack vector for threat actors in 2025. Google and Mandiant's M-Trends 2026 report confirms voice phishing hit #2 across all breaches. Here's...

VENOM: Inside a C-Suite Credential Theft Campaign That Neutralizes MFA

VENOM: Inside a C-Suite Credential Theft Campaign That Neutralizes MFA
Thomas Le Coz
Social Engineering

Abnormal Intelligence documented VENOM, a previously unknown PhaaS platform behind a five-month campaign targeting C-suite executives across 20+ industries, systematically bypassing MFA to...

From a CEO Impersonation, a Slack Lure to a Full-On Compromise: The Axios & UNC1069 Case

From a CEO Impersonation, a Slack Lure to a Full-On Compromise: The Axios & UNC1069 Case
Thomas Le Coz
Social Engineering

The recent Axios npm supply chain attack, attributed to UNC1069 (suspected North Korean actors), was not a technical exploit. It was a meticulously crafted social engineering campaign. From a...

How to Defend Against Advanced Smishing Attacks (and Why Basic Training Isn't Enough Anymore)

How to Defend Against Advanced Smishing Attacks (and Why Basic Training Isn't Enough Anymore)
Thomas Le Coz
Social Engineering

Smishing has moved well beyond a fraudulent text. From MitM OTP hijacking to cross-channel escalation, here's how sophisticated SMS-based attacks work, and what it takes to stop them.

ClickFix Attacks: How Hackers Make Your Employees Run Malware Themselves

ClickFix Attacks: How Hackers Make Your Employees Run Malware Themselves
Thomas Le Coz
Social Engineering

ClickFix is one of the fastest-growing social engineering attack techniques. It needs no exploit, no malicious attachment, just a fake error message and a willing user. Here is what happened, why...

Microsoft Entra Users: Be Careful, You Might Be the Target of a New Vishing Campaign

Microsoft Entra Users: Be Careful, You Might Be the Target of a New Vishing Campaign
Thomas Le Coz
Vishing

ShinyHunters are exploiting a legitimate Microsoft OAuth feature to compromise Entra accounts. No fake login page, no stolen password. One convincing vishing phone call is all it takes to hand...

Figure Data Breach: Social Engineering Actors Are Preying on Fintechs, but It’s Not a Fatality

Figure Data Breach: Social Engineering Actors Are Preying on Fintechs, but It’s Not a Fatality
Thomas Le Coz
Social Engineering

Blockchain lending firm Figure confirmed a significant data breach resulting from a social engineering attack on an employee, leading to the leak of customer data and highlighting the persistent...

View more