Phishing

Commercial spam now constitutes 46% of all spam globally, with a significant portion originating from compromised accounts and free email services, according to VIPRE Security Group's Q1 2026 Email Threat Trends Report.

HackRead reports that the newly emergent Bluekit phishing-as-a-service kit has been enabling extensive platform targeting with its over 40 counterfeit website templates for Outlook, Gmail, iCloud, GitHub, and Ledger, while evading multi-factor authentication through adversary-in-the-middle techniques, further lowering the barrier to cybercrime.

These financially-motivated attackers, closely aligned with Scattered Spider, use voice-phishing and social engineering to breach victims' identity platforms and traverse SaaS environments, according to a report by CrowdStrike.

The company detected about 8.3 billion email-based phishing threats between January and March.

Research from Cybernews indicates a significant rise in deepfake incidents targeting US officials over the past two years, with 156 recorded cases.

HackRead reports that threat actors have spoofed DHL in a new phishing campaign that employed a multi-step attack chain to siphon users' passwords.

Report sheds light on Chinese phishing campaigns against journalists, activists Chinese state-backed freelance hackers have launched a pair of phishing campaigns aimed at journalists and opposition activists in Taiwan, Hong Kong, Tibet, and China's Uyghur region in a span of nine months, according to The Record, a news site by cybersecurity firm Recorded Future.