Phishing - 1

2026 (3)

February (1)

security: New Clickfix variant ‘CrashFix’ deploying Python Remote Access Trojan

Microsoft Security Blog

2026-02-05

Microsoft reports a new ClickFix variant, “CrashFix,” that intentionally crashes browsers to trick users into running commands that install a Python-based remote access trojan (RAT). The campaign abuses built-in utilities (finger.exe) and a portable Python runtime to reduce detection and maintain persistence on targeted systems.

January (2)

security: Resurgence of a multi‑stage AiTM phishing and BEC campaign abusing SharePoint

Microsoft Security Blog

2026-01-22

Microsoft Defender researchers reported a resurgence of a multi-stage Adversary-in-the-Middle (AiTM) phishing campaign paired with business email compromise (BEC) that abused SharePoint and targeted multiple organizations in the energy sector, according to a Microsoft Security Blog post.

security: Phishing actors exploit complex routing and misconfigurations to spoof domains

Microsoft Security Blog

2026-01-06

Threat actors are exploiting complex mail routing and misconfigured anti-spoof protections to send phishing emails that appear to come from internal senders.

2025 (2)

October (1)

security: Cybersecurity Awareness Month: Security starts with you

Microsoft Security Blog

2025-10-01

Microsoft highlights that cybersecurity is as much about people as technology in its Cybersecurity Awareness Month post, "Security starts with you." The blog directs readers to Microsoft’s resources and practical guidance to help individuals stay safe online and adopt safer habits.

September (1)

security: AI vs. AI: Detecting an AI-obfuscated phishing campaign

Microsoft Security Blog

2025-09-24

Microsoft Threat Intelligence detected and blocked a credential-phishing campaign that likely used AI-generated code to obfuscate its payload and evade traditional defenses, highlighting a trend of attackers leveraging AI and the need for defenders to anticipate and adapt to AI-driven threats.