2026 Phishing Threat Trends Report, Vol. 8
In Volume 8 of the Phishing Threat Trends Report, we see how attackers are using real platforms, login pages, and even AI tools to launch their campaigns.
Threat actors are bypassing MFA entirely through abuse of trusted platforms, while large language models such as Claude and ChatGPT are being turned into phishing hosts on their own trusted domains. Traditional secure email gateways are missing more than 4 in 10 of these attacks.
Plus, we explore how the phishing economy has industrialized in 2026 and dive into the trends in hijacking breaking news stories bad actors use to send hyper-targeted phishing attacks.
Download now to discover:
-
How a rented "phishing-as-a-service" economy now drives the majority of credential-theft attacks and which three toolkits make up 90.2% of all kit-based phishing
-
Why password resets and MFA re-enrollment no longer stop attackers who've moved to device-code and OAuth consent abuse
-
What’s driving a 5.4-times increase in cybercriminal newsjacking since 2022 and how a less-than-16-hour turnaround from headline to lure is possible
-
How threat actors are hosting fake login pages and API-key harvesters directly on trusted AI platforms — and why traditional filters can't catch it
-
How 41%of phishing emails are getting past SEGs
Download this report today!