Phishing

DATE

NAME

CATEGORY

SUBCATE

INFO

24.4.25 Darcula phishing-as-a-service PHISHING PHaaS AI-Enabled Darcula-Suite Makes Phishing Kits More Accessible, Easier to Deploy
23.4.25 Phishing for Codes PHISHING PHISHING Phishing for Codes: Russian Threat Actors Target Microsoft 365 OAuth Workflows
15.4.25 Precision-Validated Phishing PHISHING PHISHING The Rise of Precision-Validated Credential Theft: A New Challenge for Defenders
13.4.25 Tycoon2FA PHISHING Kit Tycoon2FA New Evasion Technique for 2025
9.4.25 VibeScamming PHISHING AI VibeScamming — From Prompt to Phish: Benchmarking Popular AI Agents’ Resistance to the Dark Side
2.4.25 Lucid Phishing-as-a-Service PHISHING Platform Lucid is a sophisticated Phishing-as-a-Service (PhAAS) platform operated by Chinese-speaking threat actors, targeting 169 entities across 88 countries globally. With 129 active instances and 1000+ registered domains, Lucid ranks among prominent PhAAS platforms, alongside Darcula and Lighthouse

28.3.25

Morphing Meerkat PHISHING PHaaS A Phishing Tale of DoH and DNS MX Abuse
22.2.25 Darcula phishing-as-a-service PHISHING PAAS The Bleeding Edge of Phishing: darcula-suite 3.0 Enables DIY Phishing of Any Brand

18.1.25

Sneaky 2FA PHISHING PHISHING Sneaky 2FA: exposing a new AiTM Phishing-as-a-Service

18.1.25

Star Blizzard PHISHING PHISHING New Star Blizzard spear-phishing campaign targets WhatsApp accounts

29.11.2024

Rockstar 2FA

PHISHING

PHISHING

Trustwave SpiderLabs has been actively monitoring the rise of Phishing-as-a-Service (PaaS) platforms, which are increasingly popular among threat actors.

1.11.24

Xiū Gǒu Phishing Kit PHISHING PHISHING KIT Every Doggo Has Its Day: Unleashing the Xiū Gǒu Phishing Kit

28.10.24

Gophish Framework PHISHING CAMPAIGN Threat actor abuses Gophish to deliver new PowerRAT and DCRAT

2.8.24

OneDrive Pastejacking

PHISHING

PHISHING

OneDrive Pastejacking: The crafty phishing and downloader campaign

30.3.24DarculaPhishingPhaaSOut of the shadows – ’darcula’ iMessage and RCS smishing attacks target USPS and global postal services

28.3.22

ICEID Phishing Campaign

Phishing

Phishing/Malware/Vulenerebility