Attackers are not using the same obvious scams anymore. They are getting cleverer. Their tactics are more personalized and more convincing. Some of the new attempts look nearly identical to real vendor emails, MFA prompts, or internal notifications.
I want to know what you are observing. Share the strange ones, the convincing ones, and the scams that nearly caught you or your team. Just remember to remove any sensitive information before posting.
- Fake MFA push floods
- AI-generated emails that sound very real
- Spoofed HR or payroll updates
- Fake password-reset notifications
- QR code phishing
- Deepfake voice or video attempts
- Any new method attackers are using
The goal is to help everyone stay informed about what is really happening. If you’ve noticed something new or surprising, please share it below.
Quiz for today?
- I posted two email screenshots. One is real. One is a phishing attempt.
- Your job is simple. Tell me which one is legitimate and which one is fake, and explain why you think so.
Drop your answer below. Let’s see who can spot the red flags fastest.