Every year, without fail, as HMRC deadlines approach, a wave of phishing attacks impersonating His Majesty’s Revenue and Customs floods UK inboxes and mobile phones. 2026 is no exception and this year’s campaigns are more sophisticated, more targeted, and more convincing than ever before. PhishScout has identified and analysed multiple active phishing campaigns currently impersonating…
Email security has never been better. Machine learning classifiers, sandboxed URL detonation, real-time reputation scoring, and AI-powered phishing detection have made it substantially harder to land a malicious link in someone’s inbox. Security vendors have invested billions in solving the problem of malicious URLs in email. So attackers stopped putting URLs in email. Instead, they…
Business Email Compromise is a category of fraud in which attackers use email; either a compromised legitimate account or a convincing spoofed address to deceive employees into transferring funds, changing payment details, or disclosing sensitive information. The defining characteristic of BEC is social engineering rather than malware. There are typically no malicious attachments, no exploit…
The numbers are alarming. SMS-based phishing, known as smishing surged 230% in Q1 2026 compared to the same period in 2025, according to data aggregated from mobile carrier threat intelligence programmes and community reports submitted to PhishScout. The shift is not accidental. As email security gateways have become more sophisticated at detecting and blocking phishing…