Cofense Blog

ID: f86cb4b1-ac01-5477-aca3-ad7ce649688f

STIX ID: identity--f86cb4b1-ac01-5477-aca3-ad7ce649688f

Feed Type: rss

Earliest post: 2023-10-19

Latest post: 2026-09-10

Threat intelligence and phishing defense insights — covering phishing trends, attack analysis, malware campaigns, and practical strategies to detect and mitigate social-engineering threats.

Exclude posts that do not describe a security incident

Classification

Min Pub Date

01/01/2020

Max Pub Date

09/16/2026

Title	Date Published ↓	Describes Incident	Author	Visible
False Allegations, Real Threats: Sexual Misconduct Claims Used as Phishing Lures	2026-09-10	True	Cofense	True
Understanding Browser Trust Abuse: Exploiting Enterprise’s Most Trusted Interface	2026-08-26	True	Cofense	True
Phonescams: Casting a Wide Net in an Orchard of Low-Hanging Fruit	2026-08-17	True	Cofense	True
You're Invited to get Phished! Why Invitation-themed Emails Remain Effective	2026-08-12	True	Cofense	True
The Evolution of Remote Access Tool Abuse: From Single Payloads to Multi-Stage Campaigns	2026-07-29	True	Cofense	True
Click to Sync: From Google Ads Maintenance Notice to Credential Theft	2026-07-21	True	Cofense	True
When Routine Becomes the Threat: The Evolution of Finance-Themed Phishing	2026-07-15	True	Cofense	True
The Platform You Trust Is the Platform They Target	2026-07-01	True	Cofense	True
World Cup-Themed Phishing Campaign Delivers Voidrift Malware with Highly Personalized Lures	2026-06-18	True	Cofense	True
Elon Musk, the IRS, and Your Bank Account: Anatomy of a Multi-Stage Financial Scam	2026-06-17	True	Cofense	True
From Fake Amazon Security Alert to HarborWatch Agent: ClickFix Delivery of a Custom Monitoring RAT	2026-06-08	True	Cofense	True
Embedded Threats: How Attackers Weaponize Legitimate Emails	2026-06-03	True	Cofense	True
Steganography Secrets: Malware Hidden in Plain Sight	2026-05-20	True	Cofense	True
Steal Smarter, Not Harder: Malicious use of Vercel for Credential Phishing	2026-05-06	True	Cofense	True
The Meta 2FA Trap: From Verified Badge to Account Takeover	2026-04-27	True	Cofense	True
Weaponizing Apathy: How Threat Actors Exploit Vulnerabilities and Legitimate Software	2026-04-22	True	Cofense	True
Interactive Brokers Phishing Scam: Fake IRS W-8BEN Renewal Alert	2026-04-13	True	Cofense	True
From Tax Refund to Total Compromise: IRS-Themed Phishing Email Drives Full-Stack Financial Fraud	2026-04-09	True	Cofense	True
The Growing Abuse of GitHub and GitLab in Phishing Campaigns	2026-04-08	True	Cofense	True
Weaponizing Fear: Iran Conflict-Themed Phishing Uses Fake Emergency Alerts	2026-04-06	True	Cofense	True
One Click Away: Inside a LinkedIn Phishing Attack	2026-03-30	True	Cofense	True
Xiaomi Phishing Attempt - Red Flags You Can't Afford to Ignore	2026-03-26	True	Cofense	True
The Unintentional Enabler: How Cloudflare Services are Abused for Credential Theft and Malware Distribution	2026-03-25	True	Cofense	True
LiveChat Abuse: How Phishers Are Exploiting SaaS Support Tools to Steal Sensitive Data	2026-03-16	True	Cofense	True
Weaponizing Telegram Bots: How Threat Actors Exfiltrate Credentials	2026-03-11	True	Cofense	True
Abusing Windows File Explorer and WebDAV for Malware Delivery	2026-02-25	True	Cofense	True
Punchbowl Phishing Attack Explained: How Digital Invites Are Used to Steal Credentials	2026-02-24	True	Cofense	True
PII Pillage: How Attackers Use BitPanda to Plunder Credentials	2026-02-23	True	Cofense	True
Brand Trust as a Weapon: Multi-Brand Impersonation Campaigns Deliver JWrapper Malware	2026-02-19	True	Cofense	True
Invitation to Trouble: The Rise of Calendar Phishing Attacks	2026-02-17	True	Cofense	True
Cybercrime Ethos: The Shifting Sands of Medical Neutrality	2026-02-12	True	Cofense	True
Mispadu Phishing Malware Baseline: Delivery Chains, Capabilities, and Common Campaigns	2026-02-11	True	Cofense	True
Cofense Report Reveals AI-Powered Phishing Accelerated to One Attack Every 19 Seconds	2026-02-04	True	Cofense	True
Phishing at Cloud Scale: How AWS is Abused for Credential Theft	2026-01-28	True	Cofense	True
Trusted, Signed, Still Malicious. Exploiting Custom Email Text to Bypass Security Controls	2026-01-28	True	Cofense	True
International Threats: How Malware Campaigns Vary Across Non-English Languages	2026-01-14	True	Cofense	True
International Threats: Themes for Regional Phishing Campaigns	2026-01-07	True	Cofense	True
From Email to Exfiltration: How Threat Actors Steal ADP Login and Personal Data	2025-12-23	True	Cofense	True
Phishers Get Creative: The NoteGPT Twist You Didn’t See Coming	2025-12-09	True	Cofense	True
The 6 URL Shorteners You Didn't Know Were Helping Hackers	2025-11-19	True	Cofense	True
International Threats – Infection URLs Used in Regional Phishing Campaigns	2025-11-05	True	Cofense	True
Spain and Portugal Power Outages Spark a Surge in Phishing Attacks	2025-04-29	True	Cofense	True
Exploiting SMS: Threat Actors Use Social Engineering to Target Companies	2025-04-17	True	Cofense	True
Amazon Gift Card Email Hooks Microsoft Credentials	2025-04-10	True	Cofense	True
The Rise of Precision-Validated Credential Theft: A New Challenge for Defenders	2025-04-09	True	Cofense	True
Pick your Poison - A Double-Edged Email Attack	2025-04-08	True	Cofense	True
Q1 Goals to Gaps in Security: The Rise of HR-Themed Phishing	2025-04-04	True	Cofense	True
More Than Music: The Unseen Cybersecurity Threats of Streaming Services	2025-04-02	True	Cofense	True
Beware of the Latest Phishing Tactic Targeting Employees	2024-07-15	True	Cofense	True
A “Meta” Facebook Phish	2024-07-10	True	Hillary Long	True