Cybercriminals go shopping online just as much as you do during the holiday season. PhishingBox recently sat down with Lexington, Kentucky NBC affiliate, WLEX, to help increase consumer awareness of the threats and attacks to be on the lookout for Cyber Monday and beyond.
Watch the video for the story.
For more coverage, check out WLEX's full online version here.
Explore the latest phishing threats, including MFA bypass kits, fake CAPTCHA malware, and AI-driven scams, and how organizations can reduce social engineering risk.
Social engineering is accelerating in 2026, with attackers shifting from malware to manipulating people through voice calls, phishing emails, and AI-powered deception. From enterprise vishing campaigns stealing SSO and MFA credentials to global cyberespionage operations and large-scale breaches triggered by a single employee interaction, trust exploitation remains the primary entry point. As emerging economies and cloud-driven organizations expand their digital footprint, identity deception, impersonation, and voice-based attacks are becoming dominant threats—proving that the human element is still the most targeted vulnerability in cybersecurity.
Deep dive into password manager phishing campaigns targeting LastPass, 1Password, and Bitwarden, including MFA bypass tactics and modern mitigation strategies.
