Cofense-Annual-Report-2026.md

Cofense’s 2025 phishing report documents a marked escalation in phishing sophistication and scale driven by generative AI: highly polymorphic, adaptive phishing pages; increased abuse of legitimate remote access tools and legitimate-signed binaries; a rise in conversational BEC; and significant changes in domain abuse (notably .es). The report provides metrics showing large year-over-year increases in malware delivery and RAT use, high uniqueness of initial infection URLs (but shared infrastructure), and recommends defenses focused on post-delivery behavioral analysis, human-validated intelligence, and contextual detection.