Seasonal Surge: Why HR Phishing Peaks in Q4 and the Seven Themes Behind It
ID: c21380ad-424e-5c4d-8ff1-cda528a29af2
STIX ID: report--c21380ad-424e-5c4d-8ff1-cda528a29af2
Feed Name: Cofense Blog
This report analyzes HR-themed phishing from 2024–Q3 2025, identifying seven key lures and seasonal peaks in Q3–Q4; it highlights a sharp Q3 2025 surge in termination lures (doubling year-over-year) and compensation adjustments (rising to 55% of volume), an atypical Q2 2025 spike in handbook/policy updates, and significant declines in benefits (−33%), 401k (−73%), and open enrollment (−64%) versus 2024. Threat actors exploit authority, urgency, and fear in HR communications, and such mimicry can evade SEGs.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.