GigaTap articles tagged phishing.
- AI branding as phishing leverage in modern attacks - Threat actors are using AI platform branding as a trust layer on top of standard phishing infrastructure, increasing engagement without changing core attac
- ChatGPhish Shows the Phishing Risk Inside AI Summaries - Permiso’s ChatGPhish disclosure points to a practical risk: trusted Markdown rendering can make AI web summaries part of the phishing surface.
- Dual-Layer Phishing Raises the Cost of Detection - A reported espionage campaign uses layered spear-phishing and Azureveil malware, highlighting why defenders should validate detection across the full intru
- Nimbus Manticore Turns Search Into a Phishing Surface - Iran-linked Nimbus Manticore is reportedly using phishing and SEO poisoning against aviation and software targets. The key risk is trust in search-driven d
- Chinese PhaaS moves past password theft - GTIG says Chinese-language phishing services are maturing into real-time MFA interception platforms, making OTP-based defenses a weaker line.
- Kali365 Shows the New MFA Phishing Problem - The FBI says Kali365 abuses Microsoft’s device code login flow to hijack Microsoft 365 sessions. The risk is not just stolen passwords. It is users authori
- openSquat Finds Look-Alike Domains Before They Bite - openSquat is a Python tool for spotting newly registered domains that may impersonate real brands. Useful for blue teams, but it still needs validation.
- ThePhish: phishing triage automation worth checking carefully - ThePhish is a Python tool for automated phishing email analysis. Its metadata points to IR, IOC, MISP, and TheHive workflows, but teams should verify safet
- Microsoft flags a phishing run that stole auth tokens - Microsoft says a large phishing campaign used code-of-conduct themes and legitimate email services to steer users to attacker-controlled domains. The main
- Email Phishing Is Moving to Links—Here’s Why It Matters - Microsoft’s Q1 2026 telemetry shows phishing shifting toward links, QR lures, CAPTCHA gates, and resilient PhaaS operations.
- Phishing 2026 Survival Guide - Guide: modern phishing patterns and response playbook for individuals and small teams.