Zscaler ThreatLabZ Phishing Roundup

This Zscaler ThreatLabZ blog analyzes recent phishing activity observed in the cloud, highlighting top targeted brands and site categories, delivery methods (email/SMS links and increasing HTTPS usage), and multiple evasion techniques — including encrypted source code, punycode homographs, image-based data exfiltration, disabled right-click, and researcher IP/User-Agent filtering — with examples (compromised sites and the "chalbhai" campaign) and recommendations for detection and coverage.