LIVE THREAT INTELLIGENCE

Stay Ahead of
Cyber Threats
and Phishing Attacks

PhishScout delivers real-time threat intelligence, expert analysis, and actionable advisories to help security professionals and organizations defend against phishing and social engineering.

🔍 Explore Intel Feed Report a Phish →
Active Threat Feed LIVE
Loading live threats...
--
Phish Reported (30 days)
1,340+
IOCs Published
--
Active Campaigns Tracked
47k+
Community Members

// Latest Research

Expert Articles & Analysis

In-depth research from our security analysts on phishing trends, attacker techniques, and defensive strategies.

🎣
Featured · Threat Research
The Rise of AI-Generated Phishing: How Threat Actors Are Using LLMs to Craft Convincing Lures
Generative AI has dramatically lowered the barrier for sophisticated phishing attacks. Our research team analyzed over 3,000 suspected AI-generated phishing emails to understand what's changing — and what defenders must do now.
Sarah K. · PhishScout ResearchJun 3, 2026 · 12 min read
🔐
Technique · MFA Bypass
Adversary-in-the-Middle Attacks Are Bypassing MFA at Scale
AiTM phishing kits are now commodity tools. Here's how they work and how to stop them.
D. ParkMay 28
📱
Mobile · Smishing
Smishing Surges 230% in Q1 2026 — Who's Being Targeted?
New data reveals a dramatic shift toward SMS-based phishing across North America and Europe.
T. ReevesMay 22
🏢
BEC · Financial Fraud
Business Email Compromise Cost $2.9B in 2025 — A Tactical Breakdown
FBI IC3 data decoded: which industries are most at risk and the exact tactics being used.
M. HassanMay 19
View all articles →

// Threat Intelligence

Live Intelligence Feed

Continuously updated data on active phishing campaigns and malicious domains from URLhaus and OpenPhish.

Live Phishing URLs — OpenPhish Loading...
  • Fetching live phishing URLs...
Malicious URLs — URLhaus Loading...
  • Fetching URLhaus feed...
Access full IOC database →

// Phishing Advisories

Active Threat Advisories

Official advisories issued by the PhishScout team for active, high-confidence threats requiring immediate attention.

🚨
PSA-2026-041 — Large-Scale DocuSign Phishing Campaign Targeting Financial Institutions
A threat actor is impersonating DocuSign with pixel-perfect cloned login pages distributed via compromised email accounts. At least 12 financial institutions have reported credential theft incidents.
MITRE: T1566.002Finance · Legal · Real EstateIssued: Jun 4, 2026
Critical2h ago
⚠️
PSA-2026-039 — MFA Bypass Via AiTM Proxy Kits Observed Against Microsoft 365 Tenants
Adversary-in-the-Middle phishing kits (Evilginx3 variant) are actively bypassing MFA for Microsoft 365 accounts across enterprise environments. Session token theft is the primary objective.
MITRE: T1557Enterprise · SMBIssued: Jun 1, 2026
High3 days ago
📨
PSA-2026-037 — Smishing Campaign Impersonating USPS and IRS Surges Across US
Millions of SMS messages delivering malicious links disguised as IRS refund notifications and USPS delivery failure alerts. Victims are redirected to credential and payment card harvesting pages.
MITRE: T1660General PublicIssued: May 30, 2026
High5 days ago
📋
PSA-2026-034 — QR Code Phishing Targeting HR and Payroll Staff via Fake Onboarding Portals
Threat actors are mailing or emailing QR codes purporting to link to onboarding documents and payroll portals. Scanning redirects to credential harvesters that evade email security filters.
MITRE: T1566HR · Payroll DepartmentsIssued: May 27, 2026
Medium8 days ago
View all advisories →

// Community Intelligence

Submit a Phishing Report

Help protect the community. Share suspicious emails, URLs, or messages with our analyst team for verification and publication.

  • Anonymous submissions accepted
  • Analyst review within 2–4 hours
  • Verified threats published as advisories
  • IOCs shared with partner SIEMs and threat intel platforms
  • Credit given for verified discoveries (optional)
🎣 Report a Phishing Attempt
✅ Report submitted successfully! Our analysts will review it within 2–4 hours. Thank you for helping protect the community.
❌ Submission failed. Please try again or email us directly at reports@phishscout.net