Phishing Attacks News

385 stories · Updated every 5 minutes · Page 5 of 10

1. How QR-code phishing can slip past corporate security measures

   ESET WeLiveSecurity · 17 Aug 2026, 14:30 IST · Medium severity

   Quishing has become a popular alternative to traditional phishing. Here’s how businesses can close the gap.

2. TikTok phishing: How to spot fake login and verification pages

   Malwarebytes Labs · 25 Aug 2026, 13:30 IST · Medium severity

   Phishing pages don’t need to be sophisticated. They just need to look convincing enough to make you trust them. TikTok phishing often starts with an email or message designed to make you think you need to act on your account.

3. ZeroTokens Phishing Platform Steers Attacks in Real Time

   Infosecurity Magazine · 25 Aug 2026, 20:00 IST · Medium severity

   ZeroTokens gives phishing operators live control of victim sessions targeting 53 financial brands

4. Fake Voicemail SVG Attachments Fuel Large-Scale Phishing Campaign

   Infosecurity Magazine · 28 Aug 2026, 18:30 IST

   A large-scale phishing campaign used fake voicemail SVG attachments to bypass email defenses, targeting 5527 organizations with over 26,000 malicious messages

5. Experts flag Bank of America phishing scam that hands your device over to hackers

   TechRadar · 05 Aug 2026, 20:50 IST · Medium severity

   Experts flag Bank of America phishing scam that hands your device over to hackers

6. How AI-powered phishing killed blocklists for good

   BleepingComputer · 05 Aug 2026, 19:31 IST

   AI is helping attackers create disposable phishing infrastructure and rapidly evolving toolkits that blocklists cannot track fast enough. Push Security explains why browser-level, technique-based detection offers a more durable defense...

7. Microsoft 365 users hit by phishing scheme posing as RingCentral emails

   TechRadar · 05 Aug 2026, 18:35 IST

   Microsoft 365 users hit by phishing scheme posing as RingCentral emails

8. OTX Threat: Phishing Email Delivers ScreenConnect Malware

   AlienVault OTX · 04 Aug 2026, 23:44 IST · Medium severity

   A sophisticated phishing campaign targets Windows users with fraudulent Bank of America emails, delivering ScreenConnect remote monitoring software as malware. The attack begins with convincing emails mimicking Bank of America branding,...

9. Fake Bank of America Phishing Scam Installs Remote Access Malware

   Infosecurity Magazine · 05 Aug 2026, 13:30 IST · Medium severity

   Cybercriminals are using a fake Bank of America phishing campaign to trick users into downloading a malicious script that installs ScreenConnect, enabling remote access and persistence on compromised systems

10. Phishing service spoofs RingCentral to steal Microsoft 365 accounts

    BleepingComputer · 05 Aug 2026, 03:15 IST · Medium severity

    The Greatness phishing-as-a-service (PhaaS) platform has expanded from credential phishing to adversary-in-the-middle attacks and device-code phishing targeting Microsoft 365 accounts.

11. Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens

    The Hacker News · 04 Aug 2026, 22:57 IST

    The commercial phishing-as-a-service (PhaaS) toolkit known as Greatness has become the latest crimeware solution to add support for device code phishing, a rapidly growing cyber threat that abuses the legitimate OAuth 2.0 Device...

12. Fake Bank of America Phishing Emails Found Delivering Disguised ScreenConnect RAT via UAC Bypass

    IT Security Guru · 04 Aug 2026, 18:51 IST

    Researchers at Huntress have identified an active phishing campaign impersonating Bank of America that culminates in the covert installation of a remote monitoring and management (RMM) tool, giving attackers persistent, hard-to-detect...

13. AI makes costly spearphishing attacks easier, cyber insurer says

    Cybersecurity Dive - Latest News · 04 Aug 2026, 17:30 IST · High severity

    Dive Brief: Ransomware extortion caused roughly three-quarters of business losses in the first half of 2026, the cyber insurance firm Resilience said in a recent report. At the same time, ransomware accounted for less than 6% of the...

14. OTX Threat: Analysis of a Phishing Email Attack Case

    AlienVault OTX · 03 Aug 2026, 22:20 IST · Medium severity

    The Larva-24009 threat actor, also known as HeptaX, has been conducting phishing email campaigns since 2023, targeting Korean and global users to install malware. Active through 2026, the actor uses LNK files disguised as documents with...

15. Device Code Phishing Up 1,500% in 2026; Vishing Doubles

    darkreading · 04 Aug 2026, 12:30 IST

    Newer social engineering techniques help attackers ignore entrenched security controls and limit the evidence they leave behind.

16. KnowBe4 Launches Simulated Vishing Training to Combat Rising Voice Phishing Threats

    TechAfrica News · 03 Aug 2026, 14:45 IST

    KnowBe4, the global leader in digital workforce security, securing both humans and AI agents, announced its new simulated vishing capability designed to help organizations close what has become the fastest-growing gap in security...

17. AI cut phishing from hours to seconds, which is where DMARC and BIMI come in

    Help Net Security · 03 Aug 2026, 10:30 IST

    In this Help Net Security video, Mike Boyle, VP of Business Units at GMO GlobalSign, and Rahul Powar, CEO and founder of Red Sift, unpack the evolution of email security and why it matters for business trust. With a combined 45+ years...

18. OTX Threat: Tax Season, Open Season: Phishing and Malware Campaigns Targeting Indian Taxpayers

    AlienVault OTX · 30 Jul 2026, 15:48 IST · Medium severity

    A sophisticated malware campaign is targeting Indian taxpayers during filing season by impersonating the Income Tax Department. Attackers distribute fake penalty notices via WhatsApp from unknown or compromised accounts, using forged...

19. BCON Collective uncovers shared phishing infrastructure linked to ShinyHunters

    IT Security Guru · 31 Jul 2026, 14:18 IST · Medium severity

    Bridewell’s BCON Collective has uncovered an active phishing infrastructure spanning more than 100 malicious domains after investigating what initially appeared to be a routine blocked vishing attempt against one of its customers. The...

20. Phishing Campaigns Targeting AI Solutions Providers, (Sat, Aug 1st)

    SANS Internet Storm Center · 01 Aug 2026, 12:52 IST · Medium severity

    Most phishing campaigns rely on the fact that the victim is afraid to loose "something": money, access to information, ... Many brands have been impersonated by campaigns but I spotted some phishing emails that focus on AI services like...

21. The $5 million threat: AI Is supercharging phishing attacks

    Graham Cluley · 31 Jul 2026, 17:13 IST · Medium severity

    According to the newly-published study, phishing and social engineering are becoming more expensive to recover from, trickier to detect, and increasingly augmented by artificial intelligence. Read more in my article on the Fortra blog.

22. Teams-Themed Phishing Campaign Abused Legitimate Microsoft Login Pages

    Infosecurity Magazine · 30 Jul 2026, 17:30 IST · Medium severity

    Check Point researchers detail phishing attack as an example of attackers dropping fake Microsoft login pages in favor of abusing Microsoft’s legitimate authentication infrastructure

23. AiTM Phishing Becomes Top Initial Access Threat to Law Firms

    Infosecurity Magazine · 30 Jul 2026, 19:30 IST · Medium severity

    AiTM phishing is now the top entry point into law firms, with identity behind 56% of threats

24. 6 Reasons Why Device Code Phishing is the Fastest-Growing Threat of 2026

    The Hacker News · 31 Jul 2026, 16:54 IST · Medium severity

    Device code phishing - the abuse of the OAuth 2.0 device authorization grant to steal access tokens - has evolved from a niche red-team technique to an industrial-scale threat in under six months. Designed for input-constrained devices...

25. HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm

    The Hacker News · 31 Jul 2026, 22:09 IST · Medium severity

    Cybersecurity researchers have shed light on a previously undocumented Go-based loader framework called HollowFrame and a Rust-based malware family tracked as Matryoshka. According to Blackpoint Cyber, the intrusion sequence begins with...

26. LogoKit Phishing Kit Screenshots Victim Sites in Real Time

    Infosecurity Magazine · 29 Jul 2026, 21:30 IST · Medium severity

    LogoKit now builds per-victim phishing pages using live screenshots of the target's real website

27. ESET report highlights AI-driven threats and growth in QR code phishing

    Intelligent CIO ME · 29 Jul 2026, 15:23 IST · Medium severity

    ESET Research has released its H1 2026 Threat Report , outlining threat landscape trends observed between December 2025 and May 2026. The report found attackers are continuing to adapt established techniques to new platforms and...

28. ESET report highlights AI-driven threats and growth in QR code phishing

    Intelligent CIO Africa · 29 Jul 2026, 15:23 IST · Medium severity

    ESET Research has released its H1 2026 Threat Report , outlining threat landscape trends observed between December 2025 and May 2026. The report found attackers are continuing to adapt established techniques to new platforms and...

29. ChatGPT Joins Most Faked Brands Ranking in Phishing, Check Point Says

    TechRepublic · 28 Jul 2026, 15:08 IST

    ChatGPT entered Check Point’s top 10 phishing brand ranking as fake ChatGPT Plus payment failure emails targeted users’ credit card details. The post ChatGPT Joins Most Faked Brands Ranking in Phishing, Check Point Says appeared first...

30. Talos: Attackers Refine Phishing Playbook To Target Critical Infrastructure

    The Security Ledger · 29 Jul 2026, 01:00 IST

    Phishing played a part in more than half of all incident response engagements undertaken by Talos, Cisco's threat research organization, during the second quarter of 2026, with healthcare organizations and manufacturing firms among the...

31. Phishing Dominates as Initial Entry Method for Cyber-Attacks, as Hackers Hone Evasion Techniques

    Infosecurity Magazine · 28 Jul 2026, 18:30 IST · Medium severity

    Analysis of real-life incident response cases by Cisco Talos warns that phishing remains a powerful method of initial compromise

32. OTX Threat: Phishing on the Edge of the Web and Mobile Using QR Codes

    AlienVault OTX · 14 Feb 2026, 09:11 IST · Medium severity

    This article explores the misuse of QR codes in phishing attacks, focusing on three key areas: QR codes with URL shorteners concealing malicious destinations, in-app deep links used to steal credentials and control victims' apps, and QR...

33. Thriday customers hit with phishing email, dodgy link asking for bank details

    SmartCompany · 28 Jul 2026, 11:03 IST

    Business tax and accounting platform Thriday alerted customers to a fraudulent link contained in a message from its official email address. The post Thriday customers hit with phishing email, dodgy link asking for bank details appeared...

34. Hackers used Telegram phishing campaign to target exiled Belarusian activist

    The Record by Recorded Future · 27 Jul 2026, 21:30 IST · Medium severity

    Researchers have uncovered a highly personalized phishing campaign that used Telegram to try to hijack the account of an exiled Belarusian activist, as well as users in Russia and Kazakhstan.

35. ChatGPT joins the most impersonated brands in phishing attacks

    Help Net Security · 27 Jul 2026, 16:38 IST · Medium severity

    Microsoft continued to be the most impersonated brand in Q2 2026, accounting for 23% of all brand phishing attempts. LinkedIn, Google, Apple, and Amazon followed, with the five brands together making up more than half of all brand...

36. CTM360 Research Reveals How Insurance Phishing Has Evolved Into Real-Time Account Hijacking

    The Hacker News · 25 Jul 2026, 15:44 IST · Medium severity

    For years, phishing campaigns targeting financial institutions followed the same playbook. Victims were tricked into entering usernames and passwords, attackers collected the credentials, and accounts were compromised later when an...

37. BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery

    The Hacker News · 24 Jul 2026, 20:42 IST · Medium severity

    The North Korean threat actors behind the ClickFix-style campaigns that employ typosquatted Zoom and Microsoft Teams domains have been found to operate an active phishing kit to impersonate the videoconferencing platforms in social...

38. ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link

    The Hacker News · 24 Jul 2026, 17:23 IST

    Cybersecurity researchers have disclosed a critical vulnerability in OpenAI's ChatGPT Workspace Agents that could have allowed a single phishing link to stealthily build, authorize, and deploy an autonomous artificial intelligence (AI)...

39. ChatGPT Among Top 10 Most Impersonated Brands in Phishing Attacks, Says Check Point

    Infosecurity Magazine · 24 Jul 2026, 16:45 IST · Medium severity

    OpenAI’s chatbot tool ChatGPT ranked among the top 10 most impersonated brands in phishing attacks for the first time

40. Tycoon2FA takedown reshapes the phishing landscape

    CSO Online Security · 24 Jul 2026, 15:53 IST · Medium severity

    Traditional phishing techniques are in decline as a result of the disruption of the Tycoon2FA phishing-as-a-service (PHaaS) platform , Microsoft said in a new report, “Email threat landscape: Q2 2026 trends and insights”. “Phishing...