# Phishing and cyber scam escalation

> Live situation record from CLSTR: https://clstr.news/situations/phishing-and-cyber-scam-escalation
> Updated: 2026-08-04T21:19:24.000Z. Sources: 12. Developments: 2.

In late July 2026, analysts highlighted open‑redirect vulnerabilities and phishing emails as the dominant cyber‑threat vectors, noting that phishing accounted for the majority of data‑breach entry points and caused billions of dollars in losses.

By early August, the focus shifted to concrete evidence of a worldwide surge. Reports from Latin America showed three‑quarters of firms targeted, with banks and manufacturers hit hardest. New tactics such as WhatsApp hotel‑reservation scams, Android screen‑overlay attacks, and Wi‑Fi hijacking of hotel networks (the CaptiveCrunch campaign) were documented. Travel‑related phishing spikes were recorded, and industrial systems continued to be compromised via phishing‑laden emails. The later snapshot therefore expands the initial overview into sector‑specific statistics and emerging techniques, underscoring the growing scale and sophistication of phishing‑driven cybercrime.

## Claims

- The “Screen Overlay” technique displays fake screens over legitimate Android apps to capture credentials and payment data. (corroborated by 2 sources)
- 73% of Latin American companies were targeted by phishing campaigns in 2025. (single source)
- 81.4% of manufacturing firms in Latin America reported phishing attacks. (single source)
- 100% of banking institutions in Latin America reported phishing attempts. (single source)
- Cybercriminals use WhatsApp to impersonate hotels and send fraudulent reservation‑validation links containing real booking details. (single source)
- Microsoft identified a hotel Wi‑Fi hijacking campaign called CaptiveCrunch, linked to the Russian‑affiliated group Storm‑2945. (single source)
- Kaspersky detected about 262,000 travel‑related phishing attempts between mid‑2025 and early‑2026, with Emirates and Uber accounting for 98% of transport‑sector attacks. (single source)
- 60% of industrial cyberattacks began with phishing emails, according to ZIUR’s industrial cyber‑intelligence report. (single source)

## Timeline

### 2026-08-04: Phishing attacks and related cyber scams rise globally, targeting businesses and travelers

Phishing hits 73% of Latin American firms, while WhatsApp hotel scams, Android screen‑overlay attacks, hotel Wi‑Fi hijacking, travel phishing and industrial phishing all surge worldwide.

12 sources. https://clstr.news/cluster/cybersecurity-firms-warn-of-rising-screenoverlay-and-fakeupdate-attacks

### 2026-07-24: Open redirect attacks and phishing emails remain major cyber threats

Open redirect flaws and phishing emails stay major cyber threats, letting attackers hijack trusted links and trick users, driving most data breaches.

2 sources. https://clstr.news/cluster/open-redirect-attacks-and-phishing-emails-remain-major-cyber-threats

---
Cite as: Phishing and cyber scam escalation. CLSTR, https://clstr.news/situations/phishing-and-cyber-scam-escalation