Latest updates for Phishing

Fresh curated links around Phishing are collected here so marketers can spot useful updates and turn timely ideas into posts faster.

Recent items include:

  • N0va Phishkit Targets US and EU Businesses: A New Challenge for Identity Security
  • FBI Alert: Phishing Attacks Are Impersonating Law Enforcement
  • UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data

Post angles to try

Share the most useful takeaway for your audience.
Turn one article into a quick practical checklist.
Ask your audience how this shift affects their work.
Turn angles into scheduled posts

Fresh articles and ideas

Recent curated links from global sources. Generate one free draft from any story, then use SocialBu to schedule and refine your content calendar.

thehackernews.com /2 weeks ago

N0va Phishkit Targets US and EU Businesses: A New Challenge for Identity Security

N0va is targeting organizations across North America and Europe with phishing campaigns that impersonate trusted services and abuse legitimate authentication flows. Successful atta...

Read source
blog.knowbe4.com /6 days ago

FBI Alert: Phishing Attacks Are Impersonating Law Enforcement

The U.S. Federal Bureau of Investigation (FBI) has issued an alert warning that widespread fraud campaigns are impersonating law enforcement or government officials to trick users...

Read source
thehackernews.com /1 month ago

UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data

A recent wave of cyber attacks targeting financial services, private equity, and professional services is attributed to a data extortion group known as UNC6671. "UNC6671 continues...

Read source
gbhackers.com /1 month ago

Polymorphic Phishing Attack Generates Unique Credential-Stealing Page on Every Visit

A newly analyzed phishing operation is using server-side polymorphism to generate a distinct credential-harvesting page for virtually every request, undermining detection approache...

Read source
cofense.com /1 month ago

You're Invited to get Phished! Why Invitation-themed Emails Remain Effective

By: Micah DeHarty, Intelligence TeamThreat actors are weaponizing party invitation-themed emails to steal credentials and install malware on victims’ machines. Cofense Intelligence...

Read source
blog.knowbe4.com /1 month ago

Recruitment-Themed Phishing Campaign Targets Enterprise Users

Researchers at Zimperium are tracking widespread phishing campaigns that use Browser-in-the-Browser (BitB) attacks to trick users into handing over their enterprise credentials. Th...

Read source
infosecurity-magazine.com /1 month ago

Fake Recruiter Scams Target Corporate Credentials on Mobile

RecruitTrap campaigns use mobile-optimized phishing pages to target enterprise credentials

Read source
blog.knowbe4.com /1 month ago

Voice Phishing Attacks Target Hedge Fund Employees

Google’s Threat Intelligence Group (GTIG) is tracking a voice phishing (vishing) campaign that’s targeting hedge funds and financial firms. The researchers attribute the attacks to...

Read source
chicatphilsplace.blogspot.com /2 weeks ago

Beware Phishing

Now I am sure most of us have had personal emails in real life that were less than honest. Until Monday I had never received one from Second Life".  Well not REALLY from second lif...

Read source
infosecurity-magazine.com /1 month ago

Fake Voicemail SVG Attachments Fuel Large-Scale Phishing Campaign

A large-scale phishing campaign used fake voicemail SVG attachments to bypass email defenses, targeting 5527 organizations with over 26,000 malicious messages

Read source
thehackernews.com /1 month ago

Microsoft 365 AitM Phishing Hijacks Accounts to Collect Payroll and Finance Emails

Cybersecurity researchers have called attention to an active "widespread email-driven phishing campaign" that employs adversary-in-the-middle (AitM) techniques to take control of M...

Read source
theregister.com /1 month ago

$10K phishing kit claims it can plant rogue passkeys for persistent access to pwned accounts

Seller's demos show a browser-in-the-middle attack adding credentials seconds after authentication

Read source
cybersecuritynews.com /1 month ago

JWR Phishing Framework Uses Real-Time WebSocket Control and AES Encryption to Steal Banking Credentials

JWR is a phishing framework built for live fraud. It turns a fake payment or bank page into a live channel that lets criminals watch details arrive as they are typed. The campaign...

Read source
thehackernews.com /3 weeks ago

Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data

Microsoft has disclosed details of two campaigns in which threat actors are abusing third-party email delivery infrastructure to blast financial fraud scam messages and using passk...

Read source
marhaba.qa /2 weeks ago

NCSA Warns Public About Rise in Phishing and Impersonation Scams

The National Cyber Security Agency (NCSA) has issued an urgent advisory warning the public about fraudulent text messages and emails that impersonate government entities and major...

Read source
gbhackers.com /2 weeks ago

Smishing Triad Hackers Use JWR Phishing Kit to Steal Cards, OTPs and Bank Credentials

A large-scale SMS phishing campaign linked to the Smishing Triad is using a sophisticated phishing kit dubbed JWR to harvest payment-card data, one-time passwords, online-banking c...

Read source
thehackernews.com /1 month ago

CTM360 Uncovers Over 3,000 Recruitment Phishing URLs Using Browser-in-the-Browser (BitB) Credential Traps

Cybersecurity researchers have uncovered a large-scale, global recruitment-themed phishing campaign that uses fake interview scheduling pages and Browser-in-the-Browser (BitB) wind...

Read source
cofense.com /1 month ago

Phonescams: Casting a Wide Net in an Orchard of Low-Hanging Fruit

The blog explains how phone scams have become a highly scalable phishing tactic, with attackers impersonating trusted brands like Amazon, Microsoft, Apple, and others to trick reci...

Read source
editorialge.com /1 month ago

What Is Phishing and How to Spot It in Emails and Texts

A Microsoft 365 alert, a package redelivery text, an urgent message from your boss—phishing scams rely on speed and panic to make you act before thinking. So, what is phishing and...

Read source
gbhackers.com /2 weeks ago

Phishing Attacks Abuse Trusted Email Infrastructure and URL Cloaking to Evade Security Filters

Phishing operators are increasingly shifting away from malware-laden attachments and toward trusted delivery services, authenticated domains, and multi-stage URL cloaking designed...

Read source
cofense.com /2 weeks ago

Chatbot Conundrum: Phishing Attempts of OpenAI’s ChatGPT

Threat actors are impersonating OpenAI and ChatGPT in phishing emails, using fake subscription payment alerts to create urgency and trick users into updating their billing informat...

Read source
geekmamas.com /3 weeks ago

Why That Scam Link Looked Harmless When You Checked It

Phishing scams often use cloaking to display fake login pages only to targeted devices, typically smartphones. When reported, these pages may show as harmless or blank on other dev...

Read source
cybersecuritynews.com /1 month ago

Hackers Use QR Codes in Phishing Emails to Steal Login Credentials

Hackers are putting QR codes in phishing emails to steal login credentials. Known as quishing, the method hides a dangerous web address inside a square and persuades recipients to...

Read source
infosecurity-magazine.com /1 month ago

Def Con Attendees Targeted by Persistent Phishing Campaign

Huntress researcher explains how they were targeted by an elaborate and persistent phishing scam following Def Con

Read source

Turn fresh research into a full content calendar

Use SocialBu to discover ideas, generate post drafts, and schedule them across your social channels.

Sources covering Phishing

blog.knowbe4.com

Recent coverage from public sources
Public source

cofense.com

Recent coverage from public sources
Public source

cybersecuritynews.com

Recent coverage from public sources
Public source

editorialge.com

Recent coverage from public sources
Public source

feeds.feedburner.com

Recent coverage from public sources
Public source

gbhackers.com

Recent coverage from public sources
Public source