Surge in Silent Subject Phishing Attacks Targets VIP Users

**Executive Summary:** A widespread phishing campaign using empty or vague subject lines is targeting executives and privileged users to harvest credentials and establish persistence; attackers evade detection by removing subject-line signals, rotating domains, using QR codes/shortened URLs, and abusing legitimate remote management tools (Datto RMM) and a PaaS called FlowerStorm, with reported activity increases during Q1 2026 and recommended mitigations including MFA, user training, sender verification, and advanced email security.