🔍
Featured · Tutorial · Phishing Awareness
The 10 Most Common Phishing Lures in 2026 — And How to Spot Them
Microsoft, HMRC, Royal Mail, PayPal, LinkedIn and more — the exact lures attackers use right now, with the red flags that give every one away.
Read full article →
Threat Research · Ransomware
How Ransomware Groups Use Phishing as Their Entry Point
Phishing is the initial access vector in over 50% of ransomware attacks. The complete 5-phase attack chain from first email to ransom demand.
Read →
Tutorial · Authentication
The Complete Guide to Phishing-Resistant MFA — FIDO2, Passkeys and Hardware Keys Explained
Your MFA is probably not phishing-resistant. 99%+ of identity attacks blocked by FIDO2 — but 57% of organisations still use phishable methods.
Read →
Tutorial · Incident Response
What to Do If You've Been Phished — A Step-by-Step Guide
You clicked a link. Something felt wrong. Here's exactly what to do in the first 30 minutes.
Read →
Threat Research · Microsoft 365
Microsoft 365 Is the Most Phished Platform on Earth — Here's Why
8.3 billion phishing threats in Q1 2026. 10,000+ AiTM attacks per month. A data-driven breakdown.
Read →
🔴 Breaking · Advisory
BREAKING: Revolut Handed Customer Passports to Hackers Posing as Government
A fake government email that passed all authentication checks. No malware. No hack. Just deception.
Read →
Threat Research · AI
Can AI Stop Phishing? The Truth Behind the Cybersecurity Arms Race
AI blocks 99.9% of commodity phishing — but AI-generated attacks and quishing are slipping through.
Read →
Advisory · Critical
HMRC Tax Season Phishing Wave — What UK Taxpayers Need to Know Right Now
Thousands of fake HMRC refund emails circulating ahead of the UK tax deadline.
Read →
QR Code · Threat Research
Quishing: QR Code Phishing Is Evading Every Email Security Gateway
Security tools cannot scan QR codes. Attackers know this — exploiting it at scale.
Read →
Malware Analysis
How Hackers Bypass Your Email Security Without Sending a Single Malicious File
HTML smuggling, Base64 obfuscation, Blob-based payload delivery and LNK proxy execution.
Read →
Technique · MFA Bypass
Adversary-in-the-Middle Attacks Are Bypassing MFA at Scale
AiTM phishing kits are now commodity tools. How they work and how to stop them.
Read →
Mobile · Smishing
Smishing Surges 230% in Q1 2026 — Who's Being Targeted?
New data reveals a dramatic shift toward SMS-based phishing across North America and Europe.
Read →
BEC · Financial Fraud
Business Email Compromise Cost $2.9B in 2025 — A Tactical Breakdown
FBI IC3 data decoded: which industries are most at risk and exact tactics being used.
Read →
Got research to share?
PhishScout publishes analyst research, threat write-ups, and defensive guides from the security community. All submissions are reviewed before publishing.