Phishing scams: latest cases and how to recognize them
Phishing remains the most common entry point for fraud across Europe. This page tracks recent confirmed cases reported by national CSIRTs and law-enforcement agencies, plus the patterns Mythos has identified in user-submitted messages.
Data breach notifications are flooding inboxes and mailboxes, with over 471 million victim notices sent in the first half of 2026 alone, yet only 24% reveal the attack vector. Worse, scammers now...
Email bombing (also called form, list, or subscription bombing) is a fraud tactic where attackers flood your inbox with hundreds of sign-up confirmation emails from legitimate services. The goal is...
Job seekers are being targeted by fake Calendly booking pages that impersonate Meta (Facebook) recruiters. The pages copy a real Calendly scheduling flow, then push victims through forged Facebook...
The FBI warns that scammers are exploiting the 2026 U.S. Midterm Election through several fraud schemes. Scammers impersonate candidates, campaigns, and government entities using AI-generated voices,...
A text that contains only your name and a question mark is a deliberate hook used by scammers who buy breached contact lists. The goal is to make you reply "Who is this?" or "Wrong number" so they...
Phishing emails are evolving. Attackers embed hidden prompt-injection instructions aimed at AI assistants that summarize or triage your inbox. The visible message may look ordinary or even suspicious...
A new phishing campaign is targeting YouTubers and content creators with fake sponsorship offers from well-known brands such as Hollyland. The scam begins with a personalized email referencing the...
AI-powered phishing kit BlueKit lets criminals hijack accounts in minutes Researchers at Malwarebytes uncovered BlueKit , a phishing-as-a-service (PhaaS) toolkit sold on Russian-language cybercrime...
Scammers are sending iMessage texts that include a fake Facebook Marketplace listing showing the recipient's own name as the seller. The personalized screenshot acts as a 'conversation lure',...
A phishing campaign is using fake versions of ChatGPT, Gemini, Claude, and Perplexity to trick users, especially ad account managers and agency staff, into handing over login credentials and...
Phishing attackers are abusing legitimate Remote Monitoring and Management (RMM) tools like ScreenConnect, AnyDesk, and TeamViewer to gain remote control of victims' computers. A recent scam email...
Cybercriminals are targeting Free Mobile customers in France with sophisticated phishing emails sent after the operator's October 2024 data breach. Messages copy the official branding and demand a...
Scammers have set up roughly 70 lookalike websites that impersonate real crypto projects such as xStocks (Kraken), Zama, Kinetiq, Pendle, Firelight, Yield Basis, Keeta, NetNet and Umia. Each page...
Scammers are circulating a fake Apple-style preorder page for the unannounced iPhone Duo, promising a $500 voucher and early access. Apple has not opened preorders yet (they start October 16). The...
Phishing has moved far beyond typos and dodgy URLs. Attackers now use polished, AI-tailored language, QR codes that hide destinations, and tricks like ConsentFix and ClickFix that hijack legitimate...