[Brogy]

Hi...

Been seeing a lot of different phishing setups lately. Corporate logins, webmail, SaaS accounts, banking pages, session theft... there's quite a bit going on.

AiTM and MFA bypass get most of the attention these days, but credential theft and fake login pages are still very much around. PhaaS platforms are also becoming a bigger part of the scene. Not everything needs to be built from scratch anymore.

One thing I've noticed is that people focus too much on the latest technique and forget that the older ones are still being used. At this point, stealing credentials is only part of the picture. There's a lot more going on with sessions and account access.

What are you seeing more of lately? Corporate phishing, banking, SaaS or something else?

[DarkDev4010]

Solid point, people definitely overlook the basics while chasing the newest bypass. PhaaS lowering the barrier is huge too, feels like the old stuff is just getting repackaged and scaled.