Securitybrief.Au

Surge in Email Threats from Phishing Kits and Steganography Techniques

First seen 14 Nov 2025, 11:11 UTC • Securitybrief

•20.3

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Cybersecurity researchers report a rise in sophisticated email threats targeting organizations. Key developments include updates to the 'Tycoon 2FA' phishing kit, which has been active since August 2023, and the detection of a new kit named 'Cephas'. Additionally, there is an increasing use of image-based malware concealment techniques.

How this analysis works

Attack Flow

12 entities, 18 inferred relationships (STIX 2.1).

Technique (5)

Malware
Phishing
T1027 - Obfuscated/Compressed Files and Information
T1059.001 - PowerShell
T1566 - Phishing

Affected Platform (3)

Google Workspace
Microsoft 365
Windows

Tool (4)

Cephas Phishing Kit
PowerShell
Tycoon 2FA Phishing Kit
Windows PowerShell

Relationships

Malware targets Google Workspace
Malware targets Microsoft 365
Malware targets Windows
Phishing targets Google Workspace
Phishing targets Microsoft 365
Phishing targets Windows
T1027 - Obfuscated/Compressed Files and Information targets Google Workspace
T1027 - Obfuscated/Compressed Files and Information targets Microsoft 365
T1027 - Obfuscated/Compressed Files and Information targets Windows
T1059.001 - PowerShell targets Google Workspace
T1059.001 - PowerShell targets Microsoft 365
T1059.001 - PowerShell targets Windows
T1566 - Phishing targets Google Workspace
T1566 - Phishing targets Microsoft 365
T1566 - Phishing targets Windows
Cephas Phishing Kit related to PowerShell
Cephas Phishing Kit related to Tycoon 2FA Phishing Kit
Cephas Phishing Kit related to Windows PowerShell

Continue Reading

Russian Hackers Exploit Zimbra Zero-Day for Espionage Campaign MuddyWater Targets U.S. Entities Amid Geopolitical Tensions Evolution of Chinese-Nexus Cyber Operations: Strategic Long-Term Threats Critical miniOrange SAML SSO Vulnerabilities Allow WordPress Admin Takeover New Cyber Extortion Groups Target Critical Infrastructure with Phishing Tactics EvilTokens Phishing Kit Exploits Microsoft 365 with AI-Driven BEC Tactics

Surge in Email Threats from Phishing Kits and Steganography Techniques

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading