Cybercriminals are now posing as recruiters, offering fake job interviews to unsuspecting job seekers. These phishing campaigns often include malicious links disguised as interview scheduling tools or application forms, tricking victims into providing personal data or downloading malware. Given the rise in remote hiring, this tactic preys on economic uncertainty and desperation. In November 2023, North Korean-linked campaigns such as Contagious Interview and WageMole surfaced, compromising over 100 devices across multiple operating systems. Attackers deployed a macOS malware, distributed through fake software installs masked as part of the interview process, a tactic still active as of January 2025.

Phishers have found a new loophole in QR codes, a medium not easily analyzed by traditional security filters. Malicious QR codes can be embedded in emails, posters, or even fake promotional campaigns, leading users to phishing sites. Unlike conventional links, QR codes make it nearly impossible to preview a destination before scanning, increasing the risk of exploitation. This tactic made headlines in January 2025, when scammers began distributing fake DHL missed delivery notices containing QR codes that led to phishing sites demanding payment for rescheduled deliveries. Scanning these codes can result in financial fraud, data theft, or malware infection. DHL does not charge for redelivery and urges customers to verify such notices through official channels. This scam has been reported in Ireland, Singapore, and India.

One of the most unsettling evolutions in phishing is the rise of AI-powered voice cloning scams, commonly referred to as vishing (voice phishing). In these attacks, cybercriminals leverage sophisticated AI tools to replicate the voice of senior executives or trusted leaders within an organization. Using these convincingly lifelike audio forgeries, attackers place urgent phone calls to unsuspecting employees, pressuring them to authorize financial transactions or disclose sensitive corporate data. The artificial voices are virtually indistinguishable from the genuine article, making these scams alarmingly persuasive and notoriously difficult to detect through conventional means. A notable incident unfolded in Italy when scammers successfully cloned the voice of the country’s Defence Minister to deceive high-profile business figures. By impersonating the official, attackers fabricated a crisis narrative involving kidnapped journalists and demanded immediate ransom payments. One victim transferred nearly a million euros to a fraudulent overseas account, believing the transaction to be government-sanctioned.

A recent phishing wave leveraged DocuSign, a widely trusted e-signature platform. Attackers sent realistic emails prompting users to sign an urgent document. Once clicked, victims were directed to a fraudulent page designed to steal credentials or install malware. The attack capitalized on trust when a platform is widely used, people are less likely to question its legitimacy.

Instead of relying on traditional malicious links, attackers now convince users to copy and paste commands into their systems under the guise of troubleshooting or system optimization. These commands can install backdoors, siphon sensitive data, or grant remote access. This technique exploits human curiosity and compliance, making it particularly dangerous.

Knowing about phishing isn’t enough employees must be tested and trained regularly with real-world phishing simulations.

If you receive an unexpected request (for payment, login details, or an urgent action), confirm it directly with the sender using official contact details.

Avoid scanning random QR codes or clicking on links in unexpected emails type web addresses manually when in doubt.

Ensuring that browsers, security tools, and email clients are up-to-date helps protect against known vulnerabilities.