Email Threat Radar — June 2026

As of June 2026, email threats have reached new levels of sophistication, alarming cybersecurity experts worldwide. Phishing attacks that mimic real Microsoft login pages are becoming increasingly advanced, aiming to steal users' credentials. These attacks often use urgent themes in seemingly legitimate emails to trick recipients.

Device code scams have evolved with a 'kill switch' mechanism that allows attackers to disable the code after gaining access, making detection difficult. Victims are tricked into entering a fake device code, granting attackers access to their accounts, and then the code is deactivated to avoid traceability.

Split-click attacks represent a novel technique where a single link in an email requires two clicks: the first redirects to a harmless page, and the second leads to a malicious site. This two-step process helps bypass security filters and increases the chance of successful compromise.

There is also a notable shift in malware delivery methods. Attackers are increasingly using cloud storage services and file-sharing platforms instead of traditional email attachments. This approach bypasses conventional email security gateways and reaches a broader audience.

Overall, mid-2026 sees email threats becoming more complex and harder to detect. It is critical for users and organizations to enhance their awareness and implement multi-layered security measures to counter these evolving threats.