Microsoft led brand-impersonation phishing in Check Point’s Q3 2026 data
Apple and Google each had 8%, while later lures spoofed Claude, Google Antigravity, Apple, and Docusign.
52
Vendor
DocuSign
- Mentions · 7d0
- Mentions · 30d1
- All mentions11
- First seenSep 1, 2026
- Last mentioned11d ago
Timeline
11 articles · newest firstUS-Focused CSuite Phishing Steals Microsoft 365 Sessions and Deploys RMM Tools for Remote Access
US-focused CSuite phishing steals Microsoft 365 sessions and installs RMM tools for persistent access.
72
N0va Phishkit Targets US and EU Businesses: A New Challenge for Identity Security
N0va phishkit targets US and EU organizations with trusted-brand lures, capturing tokens via legitimate authentication flows to gain SSO access to corporate resources.
58
Hackers Use Blob URLs and Microsoft Teams to Create Phishing Pages Inside Victims’ Browsers
Barracuda details a phishing campaign using Microsoft Teams OAuth redirects and browser blob URLs to render local fake DocuSign login pages for credential theft.
48
New Phishing Attack Uses Blob URLs to Hide Malicious Pages From Security Scanners
Barracuda detailed a DocuSign-themed phishing campaign that renders credential-harvesting pages as browser blob URLs, evading URL reputation and blocklist defenses.
48
Cybercriminals are building phishing pages that exist only inside victims’ browsers
Barracuda details a DocuSign-themed phishing campaign that renders login pages locally via blob URLs, abusing genuine Microsoft OAuth and Teams infrastructure.
55
New N0va Phishkit Targets North America and EU: A Growing Identity Risk for SOCs
ANY.RUN researchers uncovered the N0va phishkit targeting government, technology, consulting, and healthcare organizations across North America and the EU via device code phishing.
56
Cybersecurity jobs available right now: August 4, 2026
Help Net Security lists cybersecurity vacancies at NATO DIANA, Docusign, OX Security, Boston Scientific and other organizations across nine countries.
8
New Phishing Attack Creates Malicious Pages Inside the Victim’s Browser
Barracuda details a phishing campaign that renders pages in-browser via blob URLs, routed through Microsoft Teams and cdn.bloom[.]io to evade detection.
52
HVNC Backdoor Targets LATAM Organizations with Fake Tax and DocuSign Lures
A custom HVNC backdoor is targeting Latin American financial organizations via fake DocuSign and NFe tax-document lures, giving attackers hidden persistent remote access.
55
NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions
NovaCookies AitM phishing kit, a Sneaky 2FA variant, uses genuine Docusign lures to steal Microsoft 365 sessions at hundreds of organizations.
45
Appears with
- Microsoftvendor · 9
- Microsoft Teamsproduct · 5
- Barracudavendor · 4
- Barracudaorganization · 3
- Dropboxvendor · 3
- ANY.RUNvendor · 3
- Microsoft 365product · 3
- Googlevendor · 2
- Zoomvendor · 2
- DocuSignproduct · 2
- SharePointproduct · 2
- OneDriveproduct · 2
- Google Driveproduct · 2
- Adobevendor · 2
- N0vamalware · 1
- EUROPEAN DYNAMICSvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.