Over 100 Organizations Targeted in ShinyHunters Phishing Campaign
A ShinyHunters-linked campaign used fake domains, vishing, and phishing kits to target SSO accounts across 100+ major organizations aiming to bypass MFA.
Phishing kits and phishing-as-a-service expanded in 2025, enabling less skilled attackers and leveraging AI-generated messages and QR-based quishing to increase realism and bypass defenses.
New Advanced Phishing Kits Use AI and MFA Bypass Tactics to Steal Credentials at Scale
Four new phishing kits — BlackForce, GhostFrame, InboxPrime AI, and Spiderman — enable large-scale credential theft and MFA bypass using MitB and evasion techniques.