Pride Month Phishing Targets Employees via Trusted Email Services

Mimecast identified a large Pride-themed phishing campaign that used compromised SendGrid accounts and lookalike pages to harvest credentials from employees; two waves in Dec 2025 and Jan 2026 targeted thousands of organisations across multiple countries and sectors, employing persona-based impersonation, CAPTCHA gating, and trusted-infrastructure abuse to evade detection—organisations should verify unexpected policy emails and increase user awareness while detection capabilities are deployed.