January 2026: Recent Threats & Social Engineering Trends
A breakdown of 2026’s top social engineering threats, including phishing, vishing, AiTM attacks, and credential exposure—and how to reduce risk.
We are pleased to announce a new and improved way to Import Groups and Targets using Microsoft. Below are instructions and on how to import using Microsoft Graph API. This new feature includes:
Once the group is created, you will be prompted to setup the Microsoft Credentials. Check the box for "Update Microsoft login credentials" and click the "Update Group" button.

You will then be redirected to Microsoft to login to the account you want to sync.

Once logged in, you will be redirected back to the portal to select which groups you want to include in the sync. If you simply want to sync everyone on the account, select "Sync All Users." When you are finished selecting your groups, click on "Update" and your targets will be synced.

If you have any questions please contact Support at support@phishingbox.com.