Based on millions of user-reported emails from 2025, the Hoxhunt Cyber Threat Intelligence Report brings organisations the latest trends regarding the threats that matter most: the ones that bypass filters and affect real people.

Some of the key takeaways of this year’s report:

1. Artificial Intelligence
   For better or worse or everything in between, generative AI is everywhere, including in phishing campaigns. Ultimately, the phishing playbook hasn’t changed that much, but it has received a layer of AI-powered polish, with cleaner language, fewer typos, more convincing formatting, and more believable workflow mimicry – many of these messages now outshine more utilitarian genuine business communications.
2. Adversary-in-the-Middle Phishing Kits
   Over the course of 2025, phishing kit developers standardised their techniques for adversary-in-the-middle phishing kits – toolkits that intercept logins in real time and capture session tokens in addition to passwords – and professionalised their tooling with an emphasis on stealth, reducing visible page tells and supporting faster post-compromise automation.
3. The Expansion of Social Engineering
   Previously the domain of email environments, social engineering is expanding into social platforms, recruitment channels and other communication layers that shape professional identity. Threat actors are now exploiting recruitment-themed messages and fake support notifications to hijack businesses’ social media accounts, creating additional reputational risk.

As ever, when it comes to these kinds of threats, true cyber resilience lies in human behaviour, not just technology. Take a look at the report below to get the full details on how attackers are evolving their techniques, how to develop your training in response, and the top actions you can take to manage human risk and safeguard your business:

Download Hoxhunt’s Threat Intelligence Report