Best of the Worst: Weekly Phishing Attack Recap | IRONSCALES

This blog summarizes 12 real phishing attacks caught by IRONSCALES, calling out key trends: attackers increasingly abuse legitimate platforms and authorized sending infrastructure to pass SPF/DKIM/DMARC, credential harvesting remains the dominant objective, and multi-hop redirect chains are laundering malicious URLs; the piece highlights a K–12 school phishing campaign leveraging GivingFunder and a privacy-protected domain with single-use OpenSSL-encrypted tokens.