Year in Review: How Phishing Attacks Evolved in 2025

It’s been our busiest year yet when it comes to phishing investigations, with new phishing techniques, toolkits, and delivery methods intercepted by Push every day. 



In real-world phishing attempts detected by Push in 2025, we’ve seen a huge rise in the volume and sophistication of phishing as attackers double-down on identity-based techniques — the leading cause of security breaches. 

Phishing intercepted by Push isn’t your run-of-the-mill credential harvesting pages, but session-stealing, MFA-bypassing, PhaaS-powered attacks that have evaded other email and network-based defenses — the kind of phishing attacks that tend to result in serious security breaches. 

We’re excited to share our insights from 2025 with the industry, where we’ll be diving into Push data, analysing phish kit evolution, and sharing real-world attack case studies.

Join Luke Jennings, VP R&D at Push Security, to learn about:

We’ll be running multiple sessions, so select the time that works best for you in the drop-down menu. 

This webinar is now available on-demand. Sign up to view the recording.