--- title: "A New Day, A New Set of Phishing Tactics | DuoCircle" description: "At DuoCircle we like to stay up to date on the latest phishing tactics so we can share them with you to keep you prepared." image: "https://www.duocircle.com/images/og-default.png" canonical: "https://www.duocircle.com/blog/phishing-protection/a-new-day-a-new-set-of-phishing-tactics/" --- Quick Answer Recent phishing tactics worth knowing: lateral phishing from compromised accounts inside a contact list, malicious LinkedIn invites delivering documents tied to APT34, PowerPoint files that fire malware on hover (when Protected View is disabled), and SMS scams targeting owners of lost iPhones with fake Apple Support links. Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fphishing-protection%2Fa-new-day-a-new-set-of-phishing-tactics%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=A%20New%20Day%2C%20A%20New%20Set%20of%20Phishing%20Tactics&url=undefined%2Fblog%2Fphishing-protection%2Fa-new-day-a-new-set-of-phishing-tactics%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fphishing-protection%2Fa-new-day-a-new-set-of-phishing-tactics%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fphishing-protection%2Fa-new-day-a-new-set-of-phishing-tactics%2F&title=A%20New%20Day%2C%20A%20New%20Set%20of%20Phishing%20Tactics "Share on Reddit") [ ](mailto:?subject=A%20New%20Day%2C%20A%20New%20Set%20of%20Phishing%20Tactics&body=Check out this article: undefined%2Fblog%2Fphishing-protection%2Fa-new-day-a-new-set-of-phishing-tactics%2F "Share via Email") ![phishing-tactics](https://media.mailhop.org/duocircle/images/2019/08/smtp-service-7412.jpg) _At [DuoCircle](/) we like to stay up to date on the latest phishing tactics_ so we can share them with you to keep you prepared. And we never cease to be amazed at the cleverness of hackers. One of the fastest-growing email threats is **_account takeover_**, where a hacker takes over someone’s email account. Once they do, they have a lot of options, and one of the options they’re starting to choose is something called [lateral phishing](https://www.techrepublic.com/article/lateral-phishing-hackers-are-taking-over-business-accounts-to-send-malicious-emails/). According to an article on [Computer Weekly](https://www.computerweekly.com/news/252466945/Lateral-phishing-used-to-attack-organisations-on-global-scale), “_lateral phishing uses hijacked accounts to send phishing emails to an array of recipients in the account’s contact list, ranging from close contacts in the company to partners at other organisation’s._” This is a particularly difficult tactic to defend against because these emails are, in essence, legitimate because they are coming from a trusted account. _You will need technology to protect yourself against this form of attack because no amount of awareness training will help_. [![Phishing awareness training ](https://media.mailhop.org/duocircle/images/2019/08/SMTP-email-4569.jpg)](https://media.mailhop.org/duocircle/images/2019/08/SMTP-email-4569.jpg) Another **phishing tactic** being rolled out is one that uses LinkedIn invites to deliver malicious documents. According to an [article](https://www.scmagazine.com/home/security-news/apts-cyberespionage/fireeye-researchers-identified-a-phishing-campaign-conducted-by-apt34-masquerading-as-a-member-of-cambridge-university-to-gain-their-victims-trust-to-open-malicious-documents/?utm%5Fsource=newsletter&utm%5Fmedium=email&utm%5Fcampaign=SCUS%5FNewswire%5F20190726&hmSubId=01xQvtS0ero1&email%5Fhash=0da939dab246e8101d6090def505f6f5&mpweb=1325-9348-1896988) on the SC Magazine website, “Researchers noticed the campaign in late June 2019 using LinkedIn professional network invitations to deliver the malicious documents that included the use of three new malware families. So far the campaign has targeted the energy, utilities, government, oil and gas industries with the threat actor utilizing their tried-and-true techniques to breach targeted organizations.” Be wary of LinkedIn invites with attachments. Perhaps the most clever new phishing tactic we’ve come across is one that **doesn’t even require you to click** on anything. According to [Extreme Tech](https://www.extremetech.com/computing/250793-hovering-links-can-install-new-malware), “All you need to do is hover your mouse over the wrong link. The one saving grace here is that we’re not talking about any old link on the internet. These are links embedded in Microsoft PowerPoint presentations. Anyone using an older version of PowerPoint or a new one with Protected View disabled is vulnerable.” Finally, no list of latest phishing tactics would be complete without some new way to attack an iPhone. This time it’s hackers going after owners of lost or stolen iPhones. They use the phone’s number to send a message, seemingly from Apple Support, telling them their iPhone has been found. According to an [article](https://ioshacker.com/news/phishing-attack-targets-owners-of-stolen-iphones) on iOSHacker, “The message also contains a web link that the message claimed will allow the victim to view the current location of his iPhone. When the link is clicked it opens a very Apple-style web page asking the user to enter his Apple ID username and password. Turns out the whole message and the website it is pointing to is fake.” [![iOSHacker,](https://media.mailhop.org/duocircle/images/2019/08/sendgrid-alternative-5697.jpg)](https://media.mailhop.org/duocircle/images/2019/08/sendgrid-alternative-5697.jpg) “The whole story is pretty bizarre and shows how tech-savvy iPhone thieves have become, since sending a fake message that shows appears as it was sent by ‘Apple’ and setting up fake site requires considerable tech knowhow.” There’s no way anyone can stay on top of all the new phishing tactics coming at us constantly. That’s why we need help. [Phishing awareness training](/phishing-protection/now-we-know-why-you-cant-depend-on-awareness-training-to-stop-phishing-attacks/) is good. But, do you know what’s better? [Phishing Protection](/email/phishing-protection) from DuoCircle. It comes with **ransomware and phishing protection**. It blocks malicious websites and includes real-time link click protection. Try it risk free for 30 days. ![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) Brad Slavin General Manager General Manager at DuoCircle. Product strategy and commercial lead across the email security portfolio. ## Secure your email infrastructure Protect, authenticate, and deliver. Contact our team to find the right solution. [Contact Sales](/contact/) [Explore Products](/products/) Share this article [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fphishing-protection%2Fa-new-day-a-new-set-of-phishing-tactics%2F) [ ](https://twitter.com/intent/tweet?text=A%20New%20Day%2C%20A%20New%20Set%20of%20Phishing%20Tactics&url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fphishing-protection%2Fa-new-day-a-new-set-of-phishing-tactics%2F) [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fphishing-protection%2Fa-new-day-a-new-set-of-phishing-tactics%2F) Copy Related Articles - [ ![AI-Generated Phishing](https://media.mailhop.org/duocircle/images/2026/04/spf-record-4522.jpg) AI-Generated Phishing Has Eliminated the Typo: Why Traditional Email Filters Are No Longer Enough Phishing ](/blog/ai-generated-phishing-eliminates-typos-making-traditional-email-filters-ineffective/) - [ ![spf-permerror-4555](https://media.mailhop.org/duocircle/images/2023/05/spf-permerror-4555.jpg) 10 Applications of ChatGPT that Hackers Are Already Exploiting Phishing ](/blog/phishing-protection/10-applications-of-chatgpt-that-hackers-are-already-exploiting/) - [ ![Email-Based Cyber-Attacks](https://media.mailhop.org/duocircle/images/2016/03/spf-record-tester-4455.jpg) 65% of Global Businesses Ill-Equipped to Defend Against Email-Based Cyber-Attacks Phishing ](/blog/phishing-protection/65-global-businesses-ill-equipped-defend-email-based-cyber-attacks/) - [ ![Email-based Ransomware Attacks](https://media.mailhop.org/duocircle/images/2018/02/email-smtp-service-7834.jpg) 7 Ways to Protect Your Organization from Email-based Ransomware Attacks Phishing ](/blog/phishing-protection/7-ways-protect-organization-email-based-ransomware-attacks/) ## Related Articles [ Phishing 11m AI-Generated Phishing Has Eliminated the Typo: Why Traditional Email Filters Are No Longer Enough Apr 28, 2026 ](/blog/ai-generated-phishing-eliminates-typos-making-traditional-email-filters-ineffective/)[ Phishing 5m 10 Applications of ChatGPT that Hackers Are Already Exploiting May 3, 2023 ](/blog/phishing-protection/10-applications-of-chatgpt-that-hackers-are-already-exploiting/)[ Phishing 4m 65% of Global Businesses Ill-Equipped to Defend Against Email-Based Cyber-Attacks Mar 29, 2016 ](/blog/phishing-protection/65-global-businesses-ill-equipped-defend-email-based-cyber-attacks/)[ Phishing 9m 7 Ways to Protect Your Organization from Email-based Ransomware Attacks Feb 11, 2018 ](/blog/phishing-protection/7-ways-protect-organization-email-based-ransomware-attacks/) ```json {"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}} ``` ```json [{"@context":"https://schema.org","@type":"BlogPosting","headline":"A New Day, A New Set of Phishing Tactics","description":"At DuoCircle we like to stay up to date on the latest phishing tactics so we can share them with you to keep you prepared.","url":"https://www.duocircle.com/blog/phishing-protection/a-new-day-a-new-set-of-phishing-tactics/","datePublished":"2019-08-01T15:11:05.000Z","dateModified":"2025-04-28T20:25:49.000Z","dateCreated":"2019-08-01T15:11:05.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/phishing-protection/a-new-day-a-new-set-of-phishing-tactics/"},"articleSection":"phishing-protection","keywords":"","wordCount":539,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2019/08/smtp-service-7412.jpg","caption":"phishing-tactics","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":2,"name":"Phishing"},{"@type":"ListItem","position":3,"name":"A New Day, A New Set of Phishing Tactics","item":"https://www.duocircle.com/blog/phishing-protection/a-new-day-a-new-set-of-phishing-tactics/"}]}] ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":3,"name":"Phishing","item":"https://www.duocircle.comundefined"},{"@type":"ListItem","position":4,"name":"A New Day, A New Set of Phishing Tactics","item":"https://www.duocircle.com/blog/phishing-protection/a-new-day-a-new-set-of-phishing-tactics/"}]} ``` ```json {"@context":"https://schema.org","@type":"BlogPosting","headline":"A New Day, A New Set of Phishing Tactics","description":"At DuoCircle we like to stay up to date on the latest phishing tactics so we can share them with you to keep you prepared.","url":"https://www.duocircle.com/blog/phishing-protection/a-new-day-a-new-set-of-phishing-tactics/","datePublished":"2019-08-01T15:11:05.000Z","dateModified":"2025-04-28T20:25:49.000Z","dateCreated":"2019-08-01T15:11:05.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/phishing-protection/a-new-day-a-new-set-of-phishing-tactics/"},"articleSection":"phishing-protection","keywords":"","wordCount":539,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2019/08/smtp-service-7412.jpg","caption":"phishing-tactics","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}} ```