Cofense

Threat actors are impersonating leaders of partner universities in emails alleging a sexual misconduct violation has occurred, using sensitive claims to trick victims into installing abused, technically legitimate Remote Access Tools (RATs) on their compu

By: Jason Meurer, Sr. Technical Product ManagerAI has quickly become table stakes in cybersecurity. Nearly every security vendor now has an AI story, and buyers increasingly expect AI to be part of any modern phishing defense strategy.As a result, the que

By: Marie Mamaril, Intelligence TeamThe biggest change in browser-related threats is not a new flaw in browser software. It is a shift in how threat actors operate. Instead of breaking into the browser, they increasingly trick the people using it by explo

By: Joseph Hoggle, Cofense Phishing Defense CenterPhonescams that impersonate some of America's favorite brands-and some less expected ones-are distributed en masse to Cofense client email inboxes daily. In the digital age, everyone is looking to get ahea

By: Micah DeHarty, Intelligence TeamThreat actors are weaponizing party invitation-themed emails to steal credentials and install malware on victims' machines. Cofense Intelligence has observed a sustained rise in phishing campaigns disguised as event inv

Artificial intelligence has fundamentally changed the economics of phishing. Threat actors can now generate convincing emails, rapidly create thousands of unique message variants, rotate infrastructure, and continuously adapt campaigns to evade traditiona

By: Micah DeHarty, Intelligence TeamThe Evolution of Remote Access Tool Abuse: From Single Payloads to Multi-Stage CampaignsCofense Intelligence has observed threat actors abusing legitimate remote access tools (RATs) using multiple attack stages to gain

Artificial intelligence continues to reshape the phishing landscape, enabling threat actors to launch campaigns that are faster, more scalable, and more adaptive than ever before. During the Cofense 2026 Mid-Year Threat Report webinar, experts from the Co

By: Elaine Irinco, Cofense Phishing Defense CenterThreat actors continue to exploit trusted brands and familiar workflows to draw users into phishing attacks. Scenarios that resemble routine account maintenance combine urgency with familiarity, increasing

By: Marie Mamaril, Intelligence TeamFinance-themed phishing is moving toward process-oriented messaging. Subject lines increasingly use ordinary business language instead of overt pressure, allowing malicious emails to resemble invoices, remittance notice