MFA bypass

The Phishing Simulation Your Marketing Team Is Missing

A phishing campaign that has been quietly running for at least five months just exposed a hard truth about employee training programs. When threat researchers at CTM360 published their RecruitTrap findings in August 2026, they mapped more than 3,000 phishing URLs impersonating recruiters from over 50 real organizations. The primary victims were marketing professionals, and […]

The Phishing Simulation Your Marketing Team Is Missing Read More »

When Business Email Compromise Survives the Takedown

Law enforcement took down Kratos. But the 1,800 criminal subscribers who paid for that phishing-as-a-service platform still have the kit code, and security researchers confirm they are already adapting it. For Canadian finance teams and executives, the practical question is not whether criminals will continue using these techniques; it is whether your organization is ready

When Business Email Compromise Survives the Takedown Read More »

$500 Phishing Kits Demand a Cybersecurity Culture Shift

Last week, the FBI and Indonesia’s National Police dismantled the W3LL phishing network, arresting the alleged developer and seizing the platform’s infrastructure. It was a meaningful enforcement milestone: the first coordinated action between American and Indonesian authorities targeting a phishing kit developer. But the headline about the arrest misses the more important story. The W3LL

$500 Phishing Kits Demand a Cybersecurity Culture Shift Read More »