Phishing  2026  2024  2023  2022  2021  2020

H  AI  APT  Attack  BigBrothers  BotNet  Congress  Cryptocurrency  Cyber  CyberCrime  Exploit  Hack  ICS  Incindent  IoT  IT  Mobil  OS  Phishing  Ransom  Safety  Security  Social  Spam  Virus  Vulnerebility

DATE NAME INFO CATEGORIE WEB

29.9.26

 Threat Actors Use Google Ads To Target Ledger Users

In August 2026, Zscaler ThreatLabz analyzed a phishing campaign that used fraudulent Google ads to target Ledger hardware wallet users. The ads redirected users through Google Cloud Storage and Vercel to a Google Sites page containing a phishing page impersonating Ledger in an iframe. During our analysis, the Vercel redirect appeared to change every 15-20 minutes.

Phishing Zscaler

29.9.26

 Quarantined isn't contained: Agentic phishing response with Elastic and Sublime

The native Sublime Security integration sends email detections into Elastic Security, where phishing incident response can tie a quarantined email to what happens next on the endpoint and pull the threat from every mailbox it reached.

 Phishing ELASTIC
28.8.26 A polymorphic phishing page (that occasionally breaks itself) As I’ve mentioned before in some of my diaries, from time to time, I like to go over phishing messages that get caught in my various spam traps or sent to us here at the Internet Storm Center. Phishing SANS
3.8.26

Analysis of a Phishing Email Attack Case by the Larva-24009 Threat Actor

 The Larva-24009 threat actor has been active since at least 2023, carrying out phishing email attacks targeting users both in Korea and globally to install malware. ASEC (AhnLab SEcurity intelligence Center (ASEC) has previously disclosed attack cases by this threat actor in 2024, and  Subsequently, Cyble also identified this same attack campaign and named it “HeptaX.” The Larva-24009 threat actor continues to carry out attacks in 2026, and this report summarizes the attacks and malware identified in 2026. Phishing AHNLAB
1.8.26  Phishing Campaigns Targeting AI Solutions Providers

Most phishing campaigns rely on the fact that the victim is afraid to loose "something": money, access to information, ... Many brands have been impersonated by campaigns but I spotted some phishing emails that focus on AI services like ChatGPT. Yesterday, I found this email that was properly designed but also sent with a very good timing: the end of the month when your classic billing process is restarted!

 Phishing SANS