MailSecHub aggregates coverage of phishing campaigns, business email compromise, malware delivery, spoofing and email authentication (SPF, DKIM, DMARC) from top reputable sources. The pipeline polls every two hours, deduplicates and classifies each story by threat category — filter by source or topic to get to what is relevant to your environment.
A weekly briefing summarizes the most significant developments, and the same digest is delivered every Monday morning via the newsletter.
Chinese threat actors are evolving phishing tactics by replacing static pages with live credential interception systems. They primarily target non-Chinese organizations, indicating deliberate avoidance of domestic targets to minimize political risk.
BTMOB Android RAT is a remote access trojan distributed as a service with a no-code builder enabling rapid creation of region-specific phishing lures. The threat primarily targets Android devices through phishing campaigns. This affects email security professionals who must monitor phishing emails delivering Android malware payloads.
Iran-linked Nimbus Manticore launched phishing and SEO poisoning attacks targeting US aviation sector to distribute the AI-built MiniFast backdoor. Email-based phishing remains a key delivery vector for this advanced persistent threat against critical infrastructure.
The FBI warns of Kali365, a phishing-as-a-service platform that targets Microsoft 365 OAuth tokens, lowering barriers for cybercriminals. The attack directly compromises email and cloud accounts, making it a critical threat to defenders managing M365 environments.
The week's most important email-security news, curated and summarized — every Monday morning. No tracking, one-click unsubscribe.