Financial Spear Phishing Digest

W3LL phishing-as-a-service enabled AiTM attacks on Microsoft 365 for BEC/wire fraud:

• Fake portals captured credentials + session data to bypass MFA,...

Storm-2755 executes payroll pirate attacks via these 7 spear-phishing tactics targeting Canadian financial ops:

• Recon: Gather employee data from...

Key technical insights from the W3LL phishing-as-a-service dismantlement:

• End-to-end toolkit for corporate takeovers: Replicates login pages, sends...

Security leaders layer adaptive AI atop secure email gateways (SEG) like Microsoft Defender to combat evolving BEC and spear-phishing in financial...

AI-Driven Impersonation Tactics

• 🔥 Claude Mythos Pause: Anthropic paused Claude Mythos amid risks of supplier impersonation at scale using...

Key indicators for crypto-targeted phishing via hosting abuse:

• Domain IOC: quiksmardex.pages.dev impersonates a decentralized exchange
• Threat: High-risk phishing luring wallet credentials or asset transfers under false promises

Key TTPs in this BEC-style attack:

• Phishing entry: Emails hack corporate systems
• Remote access: Gain control for persistence
• Impersonation:...

Technical sourcing in deepfake vishing: Attackers grab public audio from conferences to impersonate execs.

• Wiz CEO Assaf Rappaport's conference...

Key implications for payment security:

• Supplier impersonation at scale: AI generates realistic emails, invoices, and docs for BEC campaigns.
  -...

Venom SharePoint Attacks on C-Suite

• 🔥 Microsoft SharePoint Venom Attack Targets C-Suite Executives By Name: Threat actors have targeted C-Suite...

2025 cybercrime losses reached $20.87B, with BEC ranking #2 after investment scams in high-value financial hits.

• AI complaints: 22,364 reports,...

Key evasion tactics in AI-powered tax vishing:

• Voice-cloning + spoofing: Generates natural speech in any accent/tone, paired with fake D.C. caller...

VENOM spear-phishing hits C-suite execs (CEOs, CFOs) by name across 20 sectors since Nov 2025, via compromised biz emails impersonating SharePoint...

• Total losses: Nearly $21B from 1M complaints, 85% from cyber fraud
• Crypto scams: $11B total, $8.6B from investment fraud (75% via crypto)
  -...

Key tactics in Hive0117's Feb-Mar 2026 campaign targeting Russian finance depts:

• Tailored emails from compromised legit accounts, pw-protected...

Layered Defenses for Google Workspace

• 🔥 Native Protections Inadequate: Native email security in Google Workspace cannot keep up with modern...

Key insights on layered security for spear-phishing targeting financial workflows:

• Native limits exposed: Google protections miss context in BEC...

JINKUSU CAM live deepfakes target financial/crypto KYC with real-time video injection.

• Technique: InsightFace GPU face swapping enables fluid...

Rapid surge in prevalence: 32,400 complaints in 2025 vs. 17,400 in 2024 and 14,200 in 2023, ranking top five cybercrimes.

• Massive financial impact:...

• Record $20.9B total losses from internet crime, up 26% YoY – BEC ranks second at $3B across 25k complaints, targeting high-value org transactions.
  -...