logo

Cofense Blog

ID: f86cb4b1-ac01-5477-aca3-ad7ce649688f

STIX ID: identity--f86cb4b1-ac01-5477-aca3-ad7ce649688f

Feed Type: rss

Earliest post: 2023-10-19

Latest post: 2026-10-29

Threat intelligence and phishing defense insights — covering phishing trends, attack analysis, malware campaigns, and practical strategies to detect and mitigate social-engineering threats.

01/01/2020
10/31/2026
Title Date Published ↓Threat ScoreAuthorVisible
Would Your Employees Join a Fake Anthropic AI Preview?2026-10-2970CofenseTrue
Locked and Loaded: Phishing through Fake Bids and Protected Documents2026-10-2765CofenseTrue
From Guest Complaints to Malware: Blockchain Abuse Targets Hotels2026-10-0775CofenseTrue
Chatbot Conundrum: Phishing Attempts of OpenAI’s ChatGPT2026-09-1755CofenseTrue
False Allegations, Real Threats: Sexual Misconduct Claims Used as Phishing Lures2026-09-1072CofenseTrue
Understanding Browser Trust Abuse: Exploiting Enterprise’s Most Trusted Interface2026-08-2670CofenseTrue
Phonescams: Casting a Wide Net in an Orchard of Low-Hanging Fruit 2026-08-1750CofenseTrue
You're Invited to get Phished! Why Invitation-themed Emails Remain Effective2026-08-1270CofenseTrue
The Evolution of Remote Access Tool Abuse: From Single Payloads to Multi-Stage Campaigns2026-07-2975CofenseTrue
Click to Sync: From Google Ads Maintenance Notice to Credential Theft2026-07-2150CofenseTrue
When Routine Becomes the Threat: The Evolution of Finance-Themed Phishing2026-07-1570CofenseTrue
The Platform You Trust Is the Platform They Target 2026-07-0175CofenseTrue
World Cup-Themed Phishing Campaign Delivers Voidrift Malware with Highly Personalized Lures2026-06-1875CofenseTrue
Elon Musk, the IRS, and Your Bank Account: Anatomy of a Multi-Stage Financial Scam2026-06-1770CofenseTrue
From Fake Amazon Security Alert to HarborWatch Agent: ClickFix Delivery of a Custom Monitoring RAT2026-06-0872CofenseTrue
Embedded Threats: How Attackers Weaponize Legitimate Emails2026-06-0365CofenseTrue
Steganography Secrets: Malware Hidden in Plain Sight2026-05-2070CofenseTrue
Steal Smarter, Not Harder: Malicious use of Vercel for Credential Phishing2026-05-0670CofenseTrue
The Meta 2FA Trap: From Verified Badge to Account Takeover2026-04-2765CofenseTrue
Weaponizing Apathy: How Threat Actors Exploit Vulnerabilities and Legitimate Software2026-04-2268CofenseTrue
Interactive Brokers Phishing Scam: Fake IRS W-8BEN Renewal Alert2026-04-1355CofenseTrue
From Tax Refund to Total Compromise: IRS-Themed Phishing Email Drives Full-Stack Financial Fraud2026-04-0955CofenseTrue
The Growing Abuse of GitHub and GitLab in Phishing Campaigns2026-04-0872CofenseTrue
Weaponizing Fear: Iran Conflict-Themed Phishing Uses Fake Emergency Alerts2026-04-0655CofenseTrue
One Click Away: Inside a LinkedIn Phishing Attack2026-03-3055CofenseTrue
Xiaomi Phishing Attempt - Red Flags You Can't Afford to Ignore2026-03-2655CofenseTrue
The Unintentional Enabler: How Cloudflare Services are Abused for Credential Theft and Malware Distribution 2026-03-2575CofenseTrue
LiveChat Abuse: How Phishers Are Exploiting SaaS Support Tools to Steal Sensitive Data2026-03-1668CofenseTrue
Weaponizing Telegram Bots: How Threat Actors Exfiltrate Credentials2026-03-1165CofenseTrue
Abusing Windows File Explorer and WebDAV for Malware Delivery2026-02-2572CofenseTrue
Punchbowl Phishing Attack Explained: How Digital Invites Are Used to Steal Credentials2026-02-2455CofenseTrue
PII Pillage: How Attackers Use BitPanda to Plunder Credentials2026-02-2355CofenseTrue
Brand Trust as a Weapon: Multi-Brand Impersonation Campaigns Deliver JWrapper Malware2026-02-1972CofenseTrue
Invitation to Trouble: The Rise of Calendar Phishing Attacks2026-02-1765CofenseTrue
Cybercrime Ethos: The Shifting Sands of Medical Neutrality2026-02-1290CofenseTrue
Mispadu Phishing Malware Baseline: Delivery Chains, Capabilities, and Common Campaigns2026-02-1175CofenseTrue
Cofense Report Reveals AI-Powered Phishing Accelerated to One Attack Every 19 Seconds2026-02-0475CofenseTrue
Phishing at Cloud Scale: How AWS is Abused for Credential Theft2026-01-2865CofenseTrue
Trusted, Signed, Still Malicious. Exploiting Custom Email Text to Bypass Security Controls2026-01-2860CofenseTrue
International Threats: How Malware Campaigns Vary Across Non-English Languages2026-01-1470CofenseTrue
International Threats: Themes for Regional Phishing Campaigns2026-01-0770CofenseTrue
From Email to Exfiltration: How Threat Actors Steal ADP Login and Personal Data2025-12-2365CofenseTrue
Phishers Get Creative: The NoteGPT Twist You Didn’t See Coming2025-12-0960CofenseTrue
The 6 URL Shorteners You Didn't Know Were Helping Hackers2025-11-1970CofenseTrue
International Threats – Infection URLs Used in Regional Phishing Campaigns2025-11-0570CofenseTrue
Spain and Portugal Power Outages Spark a Surge in Phishing Attacks2025-04-2945CofenseTrue
Exploiting SMS: Threat Actors Use Social Engineering to Target Companies2025-04-1750CofenseTrue
Amazon Gift Card Email Hooks Microsoft Credentials2025-04-1055CofenseTrue
The Rise of Precision-Validated Credential Theft: A New Challenge for Defenders2025-04-0965CofenseTrue
Pick your Poison - A Double-Edged Email Attack2025-04-0870CofenseTrue

1–50 of 66