Email Threat Radar - June 2025
Barracuda Networks, Tuesday, June 10th, 2025
During May, Barracuda threat analysts identified several notable email-based threats targeting organizations around the world and designed to evade detection and boost the chances of success
Including:
The EvilProxy phishing kit resurfacing with new attacks and tactics, such as:
- Spoofing the Upwork employment platform
- Sending fake Microsoft 365 security warnings
- Invoice scam attacks with layered attachments for added deception
Hospitality-themed phishing attacks using the ClickFix social engineering technique made popular by nation-state threat actors.