Fast Facts
- Phishing methods are evolving rapidly, with a significant rise in voice phishing (vishing) and device code phishing, bypassing traditional security controls.
- Device code phishing, invented in 2020, saw a 15-fold increase in 2026, primarily targeting cloud identities and adopted by both state-sponsored groups and cybercriminals.
- Vishing attacks doubled in early 2026, with threat actors exploiting mobile devices and leveraging social engineering to gain access to corporate SSO applications.
- Cybercriminals prefer stealthy techniques like vishing over email phishing, making detection harder and emphasizing the importance of vigilant, multi-layered security measures.
Device Code Phishing Surges by 1,500% in 2026
Recently, there has been a dramatic rise in a new form of cyberattack called device code phishing. In the first half of 2026, attacks using this technique increased by 15 times compared to the second half of 2025. This method allows hackers to target cloud accounts and steal sensitive information more effectively. The technique was first introduced in 2020 but only gained widespread use after a cyber espionage group adopted it in 2024. Since then, many criminal groups and nation-states have started using it, making it a major threat. Experts warn that this trend could lead to more widespread hacking and increased security risks for organizations around the world. As cybercriminals get smarter and more accessible tactics emerge, defenses will need to evolve rapidly to keep up.
Vishing Attacks Double in 2026, Becoming More Stealthy
At the same time, voice phishing, or vishing, has also seen a sharp increase. From the second half of 2025 to the first half of 2026, vishing attacks have doubled. Criminals prefer vishing because it is harder to detect and involves less technical hacking. In these scams, attackers trick victims into giving away their login details and two-factor authentication codes via phone calls or voice messages. They then use this information to gain access to important corporate accounts, often registering new devices in the process. These tactics are highly effective on mobile devices, where traditional security tools are less often used. As a result, vishing is becoming a popular choice for cybercriminals seeking to stay under the radar while accessing valuable data. With these trends, organizations need to strengthen their awareness and defenses against these increasingly sophisticated threats.
Continue Your Tech Journey
Learn how the Internet of Things (IoT) is transforming everyday life.
Stay inspired by the vast knowledge available on Wikipedia.
CyberRisk-V1
