Cofense Blog

ID: f86cb4b1-ac01-5477-aca3-ad7ce649688f

STIX ID: identity--f86cb4b1-ac01-5477-aca3-ad7ce649688f

Feed Type: rss

Earliest post: 2023-10-19

Latest post: 2026-06-03

Threat intelligence and phishing defense insights — covering phishing trends, attack analysis, malware campaigns, and practical strategies to detect and mitigate social-engineering threats.

Exclude posts that do not describe a security incident

Classification

Min Pub Date

01/01/2020

Max Pub Date

06/03/2026

Title	Date Published ↓	Describes Incident	Author	Visible
Embedded Threats: How Attackers Weaponize Legitimate Emails	2026-06-03	True	Cofense	True
Steganography Secrets: Malware Hidden in Plain Sight	2026-05-20	True	Cofense	True
Steal Smarter, Not Harder: Malicious use of Vercel for Credential Phishing	2026-05-06	True	Cofense	True
The Meta 2FA Trap: From Verified Badge to Account Takeover	2026-04-27	True	Cofense	True
Weaponizing Apathy: How Threat Actors Exploit Vulnerabilities and Legitimate Software	2026-04-22	True	Cofense	True
Interactive Brokers Phishing Scam: Fake IRS W-8BEN Renewal Alert	2026-04-13	True	Cofense	True
From Tax Refund to Total Compromise: IRS-Themed Phishing Email Drives Full-Stack Financial Fraud	2026-04-09	True	Cofense	True
The Growing Abuse of GitHub and GitLab in Phishing Campaigns	2026-04-08	True	Cofense	True
Weaponizing Fear: Iran Conflict-Themed Phishing Uses Fake Emergency Alerts	2026-04-06	True	Cofense	True
One Click Away: Inside a LinkedIn Phishing Attack	2026-03-30	True	Cofense	True
Xiaomi Phishing Attempt - Red Flags You Can't Afford to Ignore	2026-03-26	True	Cofense	True
The Unintentional Enabler: How Cloudflare Services are Abused for Credential Theft and Malware Distribution	2026-03-25	True	Cofense	True
LiveChat Abuse: How Phishers Are Exploiting SaaS Support Tools to Steal Sensitive Data	2026-03-16	True	Cofense	True
Weaponizing Telegram Bots: How Threat Actors Exfiltrate Credentials	2026-03-11	True	Cofense	True
Abusing Windows File Explorer and WebDAV for Malware Delivery	2026-02-25	True	Cofense	True
Punchbowl Phishing Attack Explained: How Digital Invites Are Used to Steal Credentials	2026-02-24	True	Cofense	True
PII Pillage: How Attackers Use BitPanda to Plunder Credentials	2026-02-23	True	Cofense	True
Brand Trust as a Weapon: Multi-Brand Impersonation Campaigns Deliver JWrapper Malware	2026-02-19	True	Cofense	True
Invitation to Trouble: The Rise of Calendar Phishing Attacks	2026-02-17	True	Cofense	True
Cybercrime Ethos: The Shifting Sands of Medical Neutrality	2026-02-12	True	Cofense	True
Mispadu Phishing Malware Baseline: Delivery Chains, Capabilities, and Common Campaigns	2026-02-11	True	Cofense	True
Cofense Report Reveals AI-Powered Phishing Accelerated to One Attack Every 19 Seconds	2026-02-04	True	Cofense	True
Phishing at Cloud Scale: How AWS is Abused for Credential Theft	2026-01-28	True	Cofense	True
Trusted, Signed, Still Malicious. Exploiting Custom Email Text to Bypass Security Controls	2026-01-28	True	Cofense	True
International Threats: How Malware Campaigns Vary Across Non-English Languages	2026-01-14	True	Cofense	True
International Threats: Themes for Regional Phishing Campaigns	2026-01-07	True	Cofense	True
From Email to Exfiltration: How Threat Actors Steal ADP Login and Personal Data	2025-12-23	True	Cofense	True
Phishers Get Creative: The NoteGPT Twist You Didn’t See Coming	2025-12-09	True	Cofense	True
The 6 URL Shorteners You Didn't Know Were Helping Hackers	2025-11-19	True	Cofense	True
International Threats – Infection URLs Used in Regional Phishing Campaigns	2025-11-05	True	Cofense	True
Spain and Portugal Power Outages Spark a Surge in Phishing Attacks	2025-04-29	True	Cofense	True
Exploiting SMS: Threat Actors Use Social Engineering to Target Companies	2025-04-17	True	Cofense	True
Amazon Gift Card Email Hooks Microsoft Credentials	2025-04-10	True	Cofense	True
The Rise of Precision-Validated Credential Theft: A New Challenge for Defenders	2025-04-09	True	Cofense	True
Pick your Poison - A Double-Edged Email Attack	2025-04-08	True	Cofense	True
Q1 Goals to Gaps in Security: The Rise of HR-Themed Phishing	2025-04-04	True	Cofense	True
More Than Music: The Unseen Cybersecurity Threats of Streaming Services	2025-04-02	True	Cofense	True
Beware of the Latest Phishing Tactic Targeting Employees	2024-07-15	True	Cofense	True
A “Meta” Facebook Phish	2024-07-10	True	Hillary Long	True
New Malware Campaign Targeting Spanish Language Victims	2024-07-10	True	Cofense	True
Threats That Hide in Your Microsoft Office Documents	2024-05-29	True	Hillary Long	True
Agent Tesla: The Punches Keep Coming	2024-04-10	True	Cofense	True
Recently Updated Rhadamanthys Stealer Delivered in Federal Bureau of Transportation Campaign	2024-04-03	True	Cofense	True
SVG Files Abused in Emerging Campaigns	2024-03-13	True	Cofense	True
Car Insurance Emails Drives for NetSupport RAT Infection	2024-03-06	True	Cofense	True
New MaaS InfoStealer Malware Campaign Targeting Oil & Gas Sector	2024-02-22	True	Cofense	True
Shipping-Themed Emails: Not Just for The Holidays	2024-01-17	True	Cofense	True
Are DarkGate and PikaBot the new QakBot?	2023-11-20	True	Cofense	True
Credential phishing IOCs increased nearly 45% in Q3	2023-11-01	True	Cofense	True
How Much Does Your Information Cost?	2023-10-24	True	Cofense	True