Latest News About Phishing

Here are the latest phishing news highlights from reputable sources as of now:

• FBI warns of Kali365 phishing service targeting Microsoft 365 accounts, highlighting OAuth abuse to steal session tokens and bypass MFA. This signals attackers increasingly compromising cloud identities rather than just email credentials. [cite ]
• New extortion and vishing campaigns are on the rise, including BlackFile-linked data theft and AI-augmented voice phishing platforms (ATHR) that automate credential harvesting via voice agents. This underscores a shift toward multi-channel social engineering. [cite ]
• Law enforcement action against phishing infrastructure continues, with notable takedowns like the W3LL phishing platform, showing coordinated international efforts against kit developers. [cite ]
• Coverage also notes broader trends: phishing attacks using AI capabilities, credential theft via compromised sessions, and targeting enterprise environments beyond individual users. [cite ]
• For ongoing, real-time updates, industry portals like Infosecurity Magazine and Rapid7’s phishing sections provide frequent analyses, trends, and mitigations. [cite ][cite ]

If you’d like, I can tailor this to your sector (e.g., finance, healthcare, tech), region (Canada/US/EU focus), or deliver a brief daily digest with links to the original reports. I can also summarize actionable defense tips based on the latest patterns (e.g., protecting Microsoft 365 accounts, MFA hardening, phishing-resistant training).