Skip to content
Threat Feed
Subscribe

Product

Zapier URL Shortener

1 brief RSS
high advisory

Credential phishing campaign abusing AI themes and CAPTCHA evasion

Since September 2026, threat actors have leveraged fake Anthropic AI preview invitations, abused legitimate services, and utilized multi-layer CAPTCHA bypasses to harvest Google and Microsoft credentials.

Google Workspace +4 phishing credential-harvesting social-engineering cloud
1t 2i