Articles & Threat Research

Expert analysis, deep-dive research, and tactical guides from the PhishScout analyst community — covering phishing, social engineering, and cyber defence.

🔍
🎣
Featured · Threat Research
The Rise of AI-Generated Phishing: How Threat Actors Are Using LLMs to Craft Convincing Lures
Generative AI has dramatically lowered the barrier for sophisticated phishing attacks. Our research team analysed over 3,000 suspected AI-generated phishing emails to understand what's changing — and what defenders must do now.
Sarah K. · PhishScout ResearchJun 3, 2026 · 12 min read
Read full article →
🔐
Technique · MFA Bypass
Adversary-in-the-Middle Attacks Are Bypassing MFA at Scale
AiTM phishing kits are now commodity tools. Here's how they work and how to stop them.
D. ParkMay 28
Read →
📱
Mobile · Smishing
Smishing Surges 230% in Q1 2026 — Who's Being Targeted?
New data reveals a dramatic shift toward SMS-based phishing across North America and Europe.
T. ReevesMay 22
Read →
🏢
BEC · Financial Fraud
Business Email Compromise Cost $2.9B in 2025 — A Tactical Breakdown
FBI IC3 data decoded: which industries are most at risk and the exact tactics being used.
M. HassanMay 19
Read →
🛡️
Tutorial · Defence
How to Set Up DMARC, DKIM and SPF in 30 Minutes — A Complete Guide
Email authentication is your first line of defence against spoofing. Here's how to configure it correctly.
PhishScout TeamMay 15
Read →
📷
QR Code · New Vector
Quishing: QR Code Phishing Is Evading Every Email Security Gateway
Security tools can't scan QR codes. Attackers know this — and they're exploiting it at scale.
R. OseiMay 10
Read →
⚖️
Regulation · UK
UK NCSC's New Cyber Incident Reporting Requirements — What Businesses Must Know
New mandatory incident reporting rules take effect in 2026. Is your organisation ready?
PhishScout EditorialMay 5
Read →
🔎
Tutorial · Analysis
How to Analyse a Suspicious Email Header in 5 Minutes
Step-by-step guide to reading raw email headers, spotting spoofing attempts, and tracing the true origin.
K. MensahApr 28
Read →
🚨
Advisory · Critical
HMRC Tax Season Phishing Wave — What UK Taxpayers Need to Know Right Now
Thousands of fake HMRC refund emails are circulating ahead of the UK tax deadline. Here's how to spot them.
PhishScout TeamApr 20
Read →

Got research to share?

PhishScout publishes analyst research, threat write-ups, and defensive guides from the security community. All submissions are reviewed before publishing.

✍️ Submit Your Article