Phishing: Current Tactics and Trends

## Executive Summary ReliaQuest analyzed January 2024 customer data and found phishing accounted for the majority of initial access events, with attackers using automated Azure trial accounts, strategically named attachments (double extensions, ISO, encrypted files), and diverse hosting options (IPFS gateways, compromised WordPress sites, dynamic hosting platforms, and AWS URLs with embedded keys) to evade detection and harvest credentials; the report recommends targeted detection rules, web access controls, MFA, and user training to mitigate these active, scalable phishing tactics.