🔍
Featured · Malware Analysis · Threat Research
How Hackers Bypass Your Email Security Without Sending a Single Malicious File
A deep dive into HTML smuggling, Base64 obfuscation, Blob-based payload delivery, and LNK proxy execution — complete with YARA rules, Sigma detections, and Splunk hunting queries for defenders.
Read full article →
Technique · MFA Bypass
Adversary-in-the-Middle Attacks Are Bypassing MFA at Scale
AiTM phishing kits are now commodity tools. Here's how they work and how to stop them.
Read →
Mobile · Smishing
Smishing Surges 230% in Q1 2026 — Who's Being Targeted?
New data reveals a dramatic shift toward SMS-based phishing across North America and Europe.
Read →
BEC · Financial Fraud
Business Email Compromise Cost $2.9B in 2025 — A Tactical Breakdown
FBI IC3 data decoded: which industries are most at risk and the exact tactics being used.
Read →
QR Code · Threat Research
Quishing: QR Code Phishing Is Evading Every Email Security Gateway
Security tools can't scan QR codes. Attackers know this — and they're exploiting it at scale.
Read →
Advisory · Critical
HMRC Tax Season Phishing Wave — What UK Taxpayers Need to Know Right Now
Thousands of fake HMRC refund emails are circulating ahead of the UK tax deadline. Here's how to spot them.
Read →
Got research to share?
PhishScout publishes analyst research, threat write-ups, and defensive guides from the security community. All submissions are reviewed before publishing.