MailSecHub aggregates coverage of phishing campaigns, business email compromise, malware delivery, spoofing and email authentication (SPF, DKIM, DMARC) from top reputable sources. The pipeline polls every two hours, deduplicates and classifies each story by threat category — filter by source or topic to get to what is relevant to your environment.
A weekly briefing summarizes the most significant developments, and the same digest is delivered every Monday morning via the newsletter.
Microsoft and partners disrupted a major Chinese-language phishing kit ecosystem operated by Storm-2990, which delivered over 1 billion phishing emails and SMS messages to 75,000+ targets since early this year. The coordinated takedown involved Japanese authorities and multiple cybersecurity firms targeting customized phishing kits sold by Chinese-speaking threat actors.
China-linked group TA419 targeted U.S. AI policy experts via phishing emails impersonating officials and Anthropic staff. The campaign sought cloud account access at think tanks, universities, and law firms amid U.S.-China AI competition.
Microsoft and partners disrupted EvilTokens, a phishing-as-a-service platform that compromised over 12,000 email inboxes across 10,000+ organizations. The operation seized 50 websites and disabled 175+ domains used for credential theft and financial fraud attacks.
FBI warns of phishing campaign targeting high-profile individuals and their contacts via commercial messaging apps. Attackers impersonate government officials and journalists to gain account access and steal sensitive data. The campaign demonstrates evolving social engineering tactics against prominent figures.