Skip to content
Threat Feed
Subscribe

Product

Cloudflare CAPTCHA

2 briefs RSS
high advisory

Credential phishing campaign abusing AI themes and CAPTCHA evasion

Since September 2026, threat actors have leveraged fake Anthropic AI preview invitations, abused legitimate services, and utilized multi-layer CAPTCHA bypasses to harvest Google and Microsoft credentials.

Google Workspace +4 phishing credential-harvesting social-engineering cloud
1t 2i
high advisory

Sophisticated AitM Phishing Campaign Targeting US Organizations

A sophisticated phishing campaign targeting US organizations uses a 'code of conduct review' theme to lure victims to a malicious website, employing adversary-in-the-middle (AitM) techniques to capture authentication tokens and gain account access.

Microsoft account +1 phishing aitm credential-access initial-access
2r 2t