Scoping review : Prominent and emerging identity-related phishing threats

Sammanfattning

Phishing remains the most common attack method for conducting identity-related fraud, and doing so compromises digital identities and can lead to stolen credentials, which can potentially escalate to financial fraud. Threat actors continuously enhance and create new techniques in order to avoid current infrastructure defenses. The scoping review aims to identify prominent and emerging identity-related phishing threats and then assess their representation within the MITRE ATT&CK framework. The study conducts a scoping review of 59 sources consisting of both academic and grey literature that are published between 2022 and 2026. The sources were analyzed with thematic coding, which resulted in 17 unique identified threats. These were organized into prominent and emerging themes. The framework assessment found that prominent threats were already well-represented within the framework. Emerging threats such as AI-enhanced threats are partially represented, meaning that these threats did not have their own dedicated entries in the matrix. The study concludes that MITRE ATT&CK provides broad coverage of prominent phishing threats, but organizations should not only rely on the framework to address the emerging threats.