Follow the evidence.

From Payment Plan to Ransomware - Inside a Global Group Attack

The Cofense Phishing Defense Center (PDC) team has recently investigated a newly emerged Ransomware-as-a-Service (RaaS) operation organized by the Global Group, a financially motivated cybercriminal group running a Ransomware-as-a-Service (RaaS) platform. Targeting high-value, large-scale enterprises across different industries, escalating threats to the global digital economy. Global Group is a r

From Guest Complaints to Malware: Blockchain Abuse Targets Hotels

Cofense Intelligence has been tracking a series of email campaigns that target the accommodation industry with fake guest complaints or reviews that deliver blockchain technology-abusing malware. These emails appear to likely be a continuation of a prior series of predominantly Booking.com-spoofing emails that were seen delivering various remote access trojans (RAT) via ClickFix fake CAPTCHA websi

Understanding Browser Trust Abuse: Exploiting Enterprise’s Most Trusted Interface

The biggest change in browser-related threats is not a new flaw in browser software. It is a shift in how threat actors operate. Instead of breaking into the browser, they increasingly trick the people using it by exploiting the trust employees place in familiar browser experiences and workflows. By mimicking legitimate login screens, software update prompts, authentication requests, and security

Phonescams: Casting a Wide Net in an Orchard of Low-Hanging Fruit

The blog explains how phone scams have become a highly scalable phishing tactic, with attackers impersonating trusted brands like Amazon, Microsoft, Apple, and others to trick recipients into calling fraudulent phone numbers by creating urgency and fear of account compromise or unauthorized purchases. It highlights how AI and low-cost tools make these campaigns easy to create, rapidly mutate, and

You're Invited to get Phished! Why Invitation-themed Emails Remain Effective

Cofense Expands AI-Driven Phishing Defense Platform to Advance Secure Behavior Management

Cofense, the leader in intelligence-driven post-perimeter phishing defense, today announced an expansion of its AI-driven Phishing Defense Platform through Cofense Command Center, its orchestration layer for measurement and reporting. The new Competency Dashboard measures how employees recognize, report and respond to phishing threats, giving security teams evidence of program effectiveness rather

Chatbot Conundrum: Phishing Attempts of OpenAI’s ChatGPT

Threat actors are impersonating OpenAI and ChatGPT in phishing emails, using fake subscription payment alerts to create urgency and trick users into updating their billing information. The emails use legitimate-looking branding and redirect victims to convincing fake ChatGPT login pages designed to steal account credentials. As AI tools become more widely used, attackers are adapting familiar cred

Cofense Vision Extends Post-Perimeter Phishing Defense to Google Workspace

Cofense Vision now fully integrates with Google Workspace, giving organizations a faster, more accurate way to find and remove phishing threats that reach Gmail inboxes.

Beyond Human Risk: A Better Way to Build Secure Behavior

Lee Martin explores why security awareness programs need to move beyond measuring activity and risk to focus on whether employees are actually getting better at recognizing and responding to phishing. Cofense’s approach to Secure Behavior Management connects measurable employee competency with real-world phishing and remediation signals, giving organizations a clearer picture of what employees kno

Why Campaign-Level Phishing Defense Is the Future of Email Security

AI has fundamentally changed phishing by enabling attackers to rapidly generate countless unique email variants, making traditional indicator-based detection increasingly ineffective and requiring defenders to shift from analyzing individual messages to identifying entire phishing campaigns. Campaign-level defense combines AI, human expertise, employee reporting, and automated remediation to detec

False Allegations, Real Threats: Sexual Misconduct Claims Used as Phishing Lures

Threat actors are impersonating university leaders and using fabricated sexual misconduct allegations to pressure recipients into downloading Zoho Assist, a legitimate remote access tool abused to gain control of victims’ computers. The campaign uses convincing university branding and trusted services such as Google Drive to bypass email security controls, with more than 80% of observed targets ti

Why Cofense AI Is Different: Built for the Reality That Phishing Gets Through

Cofense AI is purpose-built for phishing, using expert-validated intelligence from real-world threats to identify malicious emails and continuously strengthen detection. It extends that intelligence across the phishing lifecycle, connecting campaign-level detection and rapid remediation with targeted employee training based on the threats organizations actually encounter. By combining explainable