1+ mon, 2+ week ago   (1107+ words) What the recipient saw. A polished fake FedEx notice. Recipient and organization details anonymized. A pixel-perfect FedEx “package reported missing” notice manufactured urgency and offered one obvious action: a “View Tracking Status” button. That button did not lead to FedEx…...

1+ mon, 4+ week ago   (722+ words) Evasion tactics developed to bypass traditional spam filters have mutated to confuse modern AI-powered email security systems. Barracuda researchers have detected more than a million attacks since April, part of a retail-themed phishing attack promising rewards, points, gift cards, or…...

2+ mon, 2+ week ago   (980+ words) Over the last month, Barracuda researchers have seen the following email threats targeting organizations and their employees: Attackers are using a genuine Microsoft login page rather than a fake version to intercept users’ session tokens and access permissions, allowing them…...

3+ mon, 6+ hour ago   (1278+ words) Barracuda Managed XDR’s Red Team runs internal simulations of real-world threats, providing security teams and researchers with insight into how attacks unfold. The Red Team Report is part of Barracuda Research — Barracuda’s threat intelligence arm. The Red Team attack simulation…...

3+ mon, 7+ hour ago   (1005+ words) And attackers are using AI too. AI has industrialized email attacks at scale — 90% of high-volume phishing campaigns now use phishing-as-a-service kits, making sophisticated attacks accessible to anyone. Attack sophistication has evolved beyond what point-in-time detection can catch. Threats weaponize after…...

4+ mon, 1+ day ago   (359+ words) Insights from Barracuda’s 2026 Email Threats Report Email attacks are evolving faster than ever, and Barracuda’s 2026 Email Threats Report sheds light on why organizations need to rethink their approach to email security. Attackers are harnessing artificial intelligence (AI) and phishing-as-a-service platforms…...

4+ mon, 5+ day ago   (802+ words) This phishing campaign was a multi-stage operation that included: None of these techniques are new. The significance is how cleanly they have been combined and deployed at scale. One of the most important things to understand about this campaign is…...

4+ mon, 2+ week ago   (895+ words) Over the last month, Barracuda’s threat analysts have detected more than 7 million device code phishing attacks, largely powered by the recently reported EvilTokens phishing kit. Barracuda has also seen other attackers leveraging the approach together with Tycoon 2FA capabilities. It is…...