{"id":18224,"date":"2026-02-03T09:41:32","date_gmt":"2026-02-03T09:41:32","guid":{"rendered":"\/cybersecurity-blog\/?p=18224"},"modified":"2026-02-06T09:31:34","modified_gmt":"2026-02-06T09:31:34","slug":"enterprise-phishing-analysis","status":"publish","type":"post","link":"https:\/\/any.run\/cybersecurity-blog\/enterprise-phishing-analysis\/","title":{"rendered":"Enterprise\u00a0Phishing:\u00a0How\u00a0Attackers\u00a0Abuse Trusted\u00a0Microsoft\u00a0&\u00a0Google\u00a0Platforms\u00a0"},"content":{"rendered":"\n

ANY.RUN<\/a> observes a growing trend of phishing kit infrastructure being hosted on legitimate cloud and CDN platforms, rather than on newly registered domains. These campaigns often target enterprise users specifically, creating a global threat to businesses. The shift creates serious visibility challenges for security teams<\/a>, as trusted platforms and valid indicators shield malicious activity from detection. <\/p>\n\n\n\n

For a deeper dive, read on and see the breakdown of such cases, along with tips on what works and what doesn\u2019t. <\/p>\n\n\n\n

Key Takeaways <\/h2>\n\n\n\n