Phishing and session hijacking
Fake sign-in pages and messages that steal passwords, one-time codes or the session cookie that keeps you logged in.
New
7 attacks reported in the last 90 days (0 in the 90 before)
7 in 12 months
MITRE ATT&CK: T1566, T1557, T1539
Our deep dive on this technique is being prepared from our reporting. The attacks we have covered are below.
Attacks we reported
- HKMA Issues Scam Alert Over DBS Bank Phishing Messages
- HKMA Warns Public Over PayPal Hong Kong Phishing Messages
- HKMA Issues Bank Scam Alert Over Phishing and Fake Sites
- Unit 42 Details Top Initial Access Vectors for September 2026
- HKPF Warns Public of Fake eTraffic Ticket Phishing Sites
- Microsoft: Phishing Campaigns Abuse MSP360 RMM for Persistent Access
- Microsoft says Star Blizzard uses RedFlick to deploy CosmicPulse
All hacking techniques · We explain how attacks work so you can defend against them; we never publish instructions for carrying one out.