Phishing on Messaging Apps: How Attackers Use WhatsApp, Teams, Slack, and SMS
KnowBe4, Thursday, March 5th, 2026
Messaging platforms are now a major vector for phishing and other social engineering attacks, according to a new report from NCC Group's Fox-IT.
What is phishing on messaging apps?
Phishing on messaging apps is a type of social engineering attack where cybercriminals use text messages, chat apps, or collaboration platforms to trick users into clicking malicious links, sharing credentials, downloading malware, or sending sensitive information. These attacks can happen over SMS, WhatsApp, Microsoft Teams, Slack, Telegram, Discord, and similar platforms.
'Messaging platforms are being leveraged as attack vectors by serving as initial access points, delivery channels, and coordination infrastructure within modern attack chains,' the researchers write.