HR impersonation
Hox rating: ★★✩✩
Threat type: Bulk phishing
Payload: Malicious link
Region: Global
Analyst: Suvi Hakala
Date: 02.07.2023
This phishing campaign aims to impersonate the recipient’s HR department. The recipient is told they must review and sign a revised employee handbook.

Forged authority and the need to comply with company policies are used as incentives to click the link. The link leads to a credential harvester.
DocuSign impersonation
Hox rating: ★✩✩✩
Threat type: Bulk phishing
Payload: Malicious link
Region: Global
Analyst: Minna Herlevi
Date: 06.07.2023
This phishing email attempts to impersonate DocuSign. It claims a pending document is awaiting the recipient's review and signature.

The malicious actors are trying to leverage curiosity and urgency to get the victim to click.
Police impersonation
Hox rating: ★★✩✩
Threat type: Bulk phishing
Payload: Pretext
Region: Nordics
Analyst: Julia Kylmälä
Date: 07.07.2023
The email claims to be a communication from the local police department, and the attachment accuses the recipient of watching pornography involving minors.

However, the email originates from an unrelated address and is easily recognizable as a phishing campaign.
Keep up with the threat feed
Don't miss the next threat feed, and subscribe to our newsletter for the latest feed and cybersecurity content. Stay informed and stay safe!