Social-engineering security for MENA

Prepare for how social engineering changeswhen it reaches your region.

Excera studies documented social-engineering attacks across MENA, then turns what it finds into sourced intelligence and playable scenarios.

Play “The Tell”

Documented regional examples

Reconstructed from public threat researchMENA attack atlas

MENA / 00

Opening a documented regional example

Select a countryIllustrative routes, not source attribution

How Excera works

A documented attack should not stay inside a report.

Excera turns it into sourced intelligence for defenders and a playable scenario for the people who may face it.

Selected in the atlasSA

Riyadh, Saudi ArabiaIDENTITY / PERMITS / VISHING

01The attack message

Source record / DOCUMENTED METHODAbsher identity update

A message carries the “Absher” sender name and a look-alike link asking the recipient to “update your information.”

02What it tells us

Channel: Sender-name SMS and look-alike link
Regional reference: Absher identity services
Requested action: Update identity information

03Try the response

What should the recipient do next?

Play the full experience↗︎

Live now

See how the attack works.Then see if it works on you.

Excera turns sourced regional intelligence into playable scenarios.

01 / Playable scenarioLive / EN + AR

The Tell

Step inside a social-engineering scenario and make the decision yourself.

02 / Sourced intelligencePublished

Excera Intel

Read evidence-led analysis of real social-engineering activity affecting the region.

03 / Regional researchSeven markets shown

MENA attack atlas

Explore documented messages, methods and local references from across MENA.

Product, grant and infrastructure support

Microsoft
for Startups

Why MENA

MENA is not a translation layer.

Attackers here use local government services, banks, delivery systems, telecom brands and language. Excera starts with evidence from the region.

Change market

01 / Translation firstIllustrative generic template

GLOBAL / TEMPLATE

Your account has a problem.

Act now using the supplied link.

02 / Research firstDocumented regional pattern

RiyadhSaudi Arabia

DOCUMENTED METHOD

Absher identity update

A message carries the “Absher” sender name and a look-alike link asking the recipient to “update your information.”

The generic template is illustrative. Regional examples retain their evidence status from the atlas.

The Tell / Playable now

Now make the call.

A voice note arrives before tomorrow’s coordination call. One detail changes what you should trust.

Shortened from a live scenarioThe restricted follow-up

Egypt + MENA / 01

Voice note transcriptRegional Cooperation Secretariat

09:14

0:00 / --:--

Economic cooperation programme 2026

Hi, just flagging the programme for tomorrow’s coordination call. It hasn’t gone to the wider group yet, so please keep it within the participating desks. I’ll send the document link here now. Open it before the call, please.

01 / Which detail changes what you should trust?

Which detail changes what you should trust?

Select one detail to reveal the response.

Play “The Tell”

Why Excera

MENA is not underserved by attackers.It is underserved by the security products meant to prepare people for them.

Mahmoud Lotfy, founder of Excera — **Mahmoud Lotfy**Founder

01
Frontline experience
Built from the Front Line
Four years across UK SOC operations, Gulf security consulting, and live spear-phishing research.
02
Regional research
The work is already public.
Documented social-engineering patterns across Saudi Arabia, Egypt, the UAE, Qatar, and Oman.
03
Shipped product
The Tell is already playable.
A public social-engineering scenario available in English and Arabic.

Pre-seed / strategic backers

Let’s build the security company MENA exports to the world.

Build With Excera