Close Menu
  • Home
  • Cybercrime and Ransomware
  • Emerging Tech
  • Threat Intelligence
  • Expert Insights
  • Careers and Learning
  • Compliance

Subscribe to Updates

Subscribe to our newsletter and never miss our latest news

Subscribe my Newsletter for New Posts & tips Let's stay updated!

What's Hot

Urgent: Ubiquiti UniFi OS Vulnerability Under Active Attack

June 24, 2026

Algerian cybercriminal extradited; botnet and fraud operations suspected

June 23, 2026

Malicious Pull Requests Threaten CI/CD Workflows

June 23, 2026
Facebook X (Twitter) Instagram
The CISO Brief
  • Home
  • Cybercrime and Ransomware
  • Emerging Tech
  • Threat Intelligence
  • Expert Insights
  • Careers and Learning
  • Compliance
Home » Global PhaaS Surge: 17,500 Phishing Domains Target 316 Brands Worldwide
Cyber Updates

Global PhaaS Surge: 17,500 Phishing Domains Target 316 Brands Worldwide

Staff WriterBy Staff WriterSeptember 20, 2025Updated:October 25, 2025No Comments2 Mins Read10 Views
Facebook Twitter Pinterest LinkedIn Tumblr Email
Share
Facebook Twitter LinkedIn Pinterest WhatsApp Email

Summary Points

  1. Rise of Phishing-as-a-Service: Lighthouse and Lucid phishing platforms are linked to over 17,500 phishing domains targeting 316 brands in 74 countries, reflecting a surge in PhaaS operations.

  2. Targeted and Customizable Campaigns: Lucid offers customizable phishing kits for various industries, ensuring only designated targets access phishing URLs while serving generic sites to others.

  3. Evolution of Tactics: Cybercriminals are shifting from platforms like Telegram back to email for credential harvesting, with a 25% rise in phishing attacks detected recently.

  4. Homoglyph Attacks and Brand Exploitation: Attackers are using deceptive lookalike domains and impersonating brands to conduct scams, including schemes involving fake tasks requiring cryptocurrency deposits.

Overview of PhaaS and Its Impact

The rise of Phishing-as-a-Service (PhaaS) platforms like Lighthouse and Lucid marks a new phase in cybercrime. Recently, researchers identified over 17,500 phishing domains targeting 316 brands across 74 countries. PhaaS operators offer a subscription-based model, allowing fraudsters to launch phishing campaigns with pre-made templates. Notably, the tactics employed by these services pose significant risks to various industries, including finance, government, and postal services.

Lucid and Lighthouse allow customers to customize phishing templates and monitor victims in real-time. This capability enhances their effectiveness. For instance, Lighthouse offers phishers the ability to impersonate over 200 platforms, creating tailored experiences for targets. Researchers attribute many of these attacks to a group known as XinXin, illustrating the interconnected nature of these criminal activities.

Emerging Trends in Phishing Attacks

The tactics of cybercriminals continue to evolve. Recent reports indicate a shift from platforms like Telegram back to traditional email channels for harvesting credentials. This transition results in a 25% increase in phishing attacks within a month. Criminals find emails convenient for anonymity and easily create throwaway accounts.

Moreover, innovative phishing techniques, such as homoglyph attacks, exploit visual similarities in domain names. Interestingly, over 600 bogus domains used this method to deceive cryptocurrency users. These attacks illustrate a growing trend of using brand impersonation to lure individuals into financial scams.

As the PhaaS market expands, it presents challenges for cybersecurity. The collaboration among threat actors underscores the need for heightened awareness and security measures across all sectors. The constant evolution of tactics requires both businesses and individuals to remain vigilant in protecting sensitive information.

Stay Ahead with the Latest Tech Trends

Learn how the Internet of Things (IoT) is transforming everyday life.

Stay inspired by the vast knowledge available on Wikipedia.

DataProtection-V1

Share. Facebook Twitter Pinterest LinkedIn Tumblr Email
Previous ArticleCritical Patch for Flaw Resembles Past Ransomware Exploits in GoAnywhere MFT
Next Article Stay Ahead with Cutting-Edge NHI Monitoring
Avatar photo
Staff Writer
  • Website

John Marcelli is a staff writer for the CISO Brief, with a passion for exploring and writing about the ever-evolving world of technology. From emerging trends to in-depth reviews of the latest gadgets, John stays at the forefront of innovation, delivering engaging content that informs and inspires readers. When he's not writing, he enjoys experimenting with new tech tools and diving into the digital landscape.

Related Posts

Bridging the Critical Confidence Gap in Enterprise AI Security

June 16, 2026

Legal Industry VPNs: Falling to Modern Threats

June 15, 2026

Closing the Gap: The Rising Threat of Third-Party Privileged Access

June 14, 2026

Comments are closed.

Latest Posts

Urgent: Ubiquiti UniFi OS Vulnerability Under Active Attack

June 24, 2026

Bajaj Auto Confirms Ransomware Attack Impacting Systems

June 23, 2026

Hackers’ Hidden Arsenal: Velociraptor, Cloudflare Tunnels, Zoho Assist & VS Code SSH

June 23, 2026

Algerian Man Busted for Operating Dual Cybercrime Marketplaces

June 23, 2026
Don't Miss

Bridging the Critical Confidence Gap in Enterprise AI Security

By Staff WriterJune 16, 2026

Summary Points Current AI security testing methods, like tabletop exercises, fail to reveal how AI…

Legal Industry VPNs: Falling to Modern Threats

June 15, 2026

Closing the Gap: The Rising Threat of Third-Party Privileged Access

June 14, 2026

Subscribe to Updates

Subscribe to our newsletter and never miss our latest news

Subscribe my Newsletter for New Posts & tips Let's stay updated!

Recent Posts

  • Urgent: Ubiquiti UniFi OS Vulnerability Under Active Attack
  • Algerian cybercriminal extradited; botnet and fraud operations suspected
  • Malicious Pull Requests Threaten CI/CD Workflows
  • Bajaj Auto Confirms Ransomware Attack Impacting Systems
  • Hackers’ Hidden Arsenal: Velociraptor, Cloudflare Tunnels, Zoho Assist & VS Code SSH
About Us
About Us

Welcome to The CISO Brief, your trusted source for the latest news, expert insights, and developments in the cybersecurity world.

In today’s rapidly evolving digital landscape, staying informed about cyber threats, innovations, and industry trends is critical for professionals and organizations alike. At The CISO Brief, we are committed to providing timely, accurate, and insightful content that helps security leaders navigate the complexities of cybersecurity.

Facebook X (Twitter) Pinterest YouTube WhatsApp
Our Picks

Urgent: Ubiquiti UniFi OS Vulnerability Under Active Attack

June 24, 2026

Algerian cybercriminal extradited; botnet and fraud operations suspected

June 23, 2026

Malicious Pull Requests Threaten CI/CD Workflows

June 23, 2026
Most Popular

Protecting MCP Security: Defeating Prompt Injection & Tool Poisoning

January 30, 202633 Views

Unlock the Power of Free WormGPT: Harnessing DeepSeek, Gemini, and Kimi-K2 AI Models

November 27, 202530 Views

The New Face of DDoS is Impacted by AI

August 4, 202528 Views

Archives

  • June 2026
  • May 2026
  • April 2026
  • March 2026
  • February 2026
  • January 2026
  • December 2025
  • November 2025
  • October 2025
  • September 2025
  • August 2025
  • July 2025
  • June 2025

Categories

  • Compliance
  • Cyber Updates
  • Cybercrime and Ransomware
  • Editor's pick
  • Emerging Tech
  • Events
  • Featured
  • Insights
  • Most Read
  • Threat Intelligence
  • Uncategorized
© 2026 thecisobrief. Designed by thecisobrief.
  • Home
  • About Us
  • Advertise with Us
  • Contact Us
  • DMCA
  • Privacy Policy
  • Terms & Conditions

Type above and press Enter to search. Press Esc to cancel.