When spear phishing met mass phishing

The report highlights a surge in “mixed” phishing campaigns that blend spear‑phishing techniques into mass operations, using personalized HR-themed lures, ghost spoofing of sender names, and generic Outlook-style credential pages often hosted on IPFS. Drawing on detections from late 2023 to May 2024, it underscores increasing attacker sophistication driven by AI and third-party phishing services and recommends verification via alternate channels, regular user awareness training, and deployment of advanced anti-spam and protection solutions.