{"id":375,"date":"2026-09-23T05:10:01","date_gmt":"2026-09-23T05:10:01","guid":{"rendered":"https:\/\/ntrigo.com\/blog\/?p=375"},"modified":"2026-09-23T05:10:02","modified_gmt":"2026-09-23T05:10:02","slug":"you-dont-have-to-click-a-phishing-email-to-be-phished","status":"publish","type":"post","link":"https:\/\/ntrigo.com\/blog\/you-dont-have-to-click-a-phishing-email-to-be-phished\/","title":{"rendered":"You Don&#8217;t Have to Click a Phishing Email to Be Phished"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">On September 14, 2026, a supply chain attack affected Brevo, a CRM and digital marketing platform. Attackers used a compromised Cloudflare API key to inject malicious code into Brevo websites and Brevo scripts embedded in customer websites. For approximately 5.5 hours, visitors to affected websites could be exposed to malicious content that appeared to be a legitimate Cloudflare verification.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">And this is where it gets interesting.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The user didn&#8217;t visit a suspicious website. They visited a legitimate website, or a website belonging to a company they already knew and trusted. The malicious script displayed what appeared to be a Cloudflare &#8220;Verify you are human&#8221; screen and instructed the user to perform actions that ultimately led to malicious code being executed on their computer. This technique, known as ClickFix, is a form of social engineering that exploits the user&#8217;s trust in the environment they are already in.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">And that highlights an important point about phishing.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><a href=\"https:\/\/redfox.ntrigo.com\/ai-phishing-detection.html\">The challenge is no longer just identifying a suspicious email<\/a><\/strong>, a newly registered domain, or a link that appears on a blocklist.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">What happens when the link or content comes from a legitimate source?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">What happens when a domain that has been trusted for years suddenly starts behaving differently?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">And what happens when the user doesn&#8217;t even realize they are inside an attack?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The Brevo incident is a reminder that &#8220;trusted&#8221; does not necessarily mean &#8220;safe.&#8221; Even a legitimate source can become a delivery channel for an attack.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In a world where attacks change rapidly, detection needs to look beyond reputation and historical data. It needs to understand what is happening now, in the context in which the user encounters it.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Because sometimes, the user doesn&#8217;t need to click a suspicious link.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The link is already where they trust it to be.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>On September 14, 2026, a supply chain attack affected Brevo, a CRM and digital marketing platform. Attackers used a compromised Cloudflare API key to inject&hellip;<\/p>\n","protected":false},"author":1,"featured_media":376,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"pagelayer_contact_templates":[],"_pagelayer_content":"","footnotes":""},"categories":[1],"tags":[],"class_list":["post-375","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.3 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>You Don&#039;t Have to Click a Phishing Email to Be Phished - NTrigo Security Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/ntrigo.com\/blog\/you-dont-have-to-click-a-phishing-email-to-be-phished\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"You Don&#039;t Have to Click a Phishing Email to Be Phished - NTrigo Security Blog\" \/>\n<meta property=\"og:description\" content=\"On September 14, 2026, a supply chain attack affected Brevo, a CRM and digital marketing platform. Attackers used a compromised Cloudflare API key to inject&hellip;\" \/>\n<meta property=\"og:url\" content=\"https:\/\/ntrigo.com\/blog\/you-dont-have-to-click-a-phishing-email-to-be-phished\/\" \/>\n<meta property=\"og:site_name\" content=\"NTrigo Security Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/nTrigoSoftware\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-23T05:10:01+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-23T05:10:02+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/ntrigo.com\/blog\/wp-content\/uploads\/2026\/09\/598945641.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"768\" \/>\n\t<meta property=\"og:image:height\" content=\"768\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/you-dont-have-to-click-a-phishing-email-to-be-phished\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/you-dont-have-to-click-a-phishing-email-to-be-phished\\\/\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/#\\\/schema\\\/person\\\/ed9591b6fc8456fc58fae61be7cb0770\"},\"headline\":\"You Don&#8217;t Have to Click a Phishing Email to Be Phished\",\"datePublished\":\"2026-09-23T05:10:01+00:00\",\"dateModified\":\"2026-09-23T05:10:02+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/you-dont-have-to-click-a-phishing-email-to-be-phished\\\/\"},\"wordCount\":309,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/you-dont-have-to-click-a-phishing-email-to-be-phished\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/598945641.jpg\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/ntrigo.com\\\/blog\\\/you-dont-have-to-click-a-phishing-email-to-be-phished\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/you-dont-have-to-click-a-phishing-email-to-be-phished\\\/\",\"url\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/you-dont-have-to-click-a-phishing-email-to-be-phished\\\/\",\"name\":\"You Don't Have to Click a Phishing Email to Be Phished - NTrigo Security Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/you-dont-have-to-click-a-phishing-email-to-be-phished\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/you-dont-have-to-click-a-phishing-email-to-be-phished\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/598945641.jpg\",\"datePublished\":\"2026-09-23T05:10:01+00:00\",\"dateModified\":\"2026-09-23T05:10:02+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/you-dont-have-to-click-a-phishing-email-to-be-phished\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/ntrigo.com\\\/blog\\\/you-dont-have-to-click-a-phishing-email-to-be-phished\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/you-dont-have-to-click-a-phishing-email-to-be-phished\\\/#primaryimage\",\"url\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/598945641.jpg\",\"contentUrl\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/598945641.jpg\",\"width\":768,\"height\":768},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/you-dont-have-to-click-a-phishing-email-to-be-phished\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"You Don&#8217;t Have to Click a Phishing Email to Be Phished\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/\",\"name\":\"NTrigo Security Blog\",\"description\":\"NTrigo Security Blog\",\"publisher\":{\"@id\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/#organization\",\"name\":\"NTrigo Security Blog\",\"url\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/01\\\/NTrigo-Blog.png\",\"contentUrl\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/01\\\/NTrigo-Blog.png\",\"width\":148,\"height\":95,\"caption\":\"NTrigo Security Blog\"},\"image\":{\"@id\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/nTrigoSoftware\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/#\\\/schema\\\/person\\\/ed9591b6fc8456fc58fae61be7cb0770\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/0049ab18a7fc704da3bcaaaaf62c9b51301fd388c1e23acc3c15e39b6279ef6a?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/0049ab18a7fc704da3bcaaaaf62c9b51301fd388c1e23acc3c15e39b6279ef6a?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/0049ab18a7fc704da3bcaaaaf62c9b51301fd388c1e23acc3c15e39b6279ef6a?s=96&d=mm&r=g\",\"caption\":\"admin\"},\"sameAs\":[\"https:\\\/\\\/ntrigo.com\\\/blog\"],\"url\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/author\\\/admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"You Don't Have to Click a Phishing Email to Be Phished - NTrigo Security Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/ntrigo.com\/blog\/you-dont-have-to-click-a-phishing-email-to-be-phished\/","og_locale":"en_US","og_type":"article","og_title":"You Don't Have to Click a Phishing Email to Be Phished - NTrigo Security Blog","og_description":"On September 14, 2026, a supply chain attack affected Brevo, a CRM and digital marketing platform. Attackers used a compromised Cloudflare API key to inject&hellip;","og_url":"https:\/\/ntrigo.com\/blog\/you-dont-have-to-click-a-phishing-email-to-be-phished\/","og_site_name":"NTrigo Security Blog","article_publisher":"https:\/\/www.facebook.com\/nTrigoSoftware\/","article_published_time":"2026-09-23T05:10:01+00:00","article_modified_time":"2026-09-23T05:10:02+00:00","og_image":[{"width":768,"height":768,"url":"https:\/\/ntrigo.com\/blog\/wp-content\/uploads\/2026\/09\/598945641.jpg","type":"image\/jpeg"}],"author":"admin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"admin","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/ntrigo.com\/blog\/you-dont-have-to-click-a-phishing-email-to-be-phished\/#article","isPartOf":{"@id":"https:\/\/ntrigo.com\/blog\/you-dont-have-to-click-a-phishing-email-to-be-phished\/"},"author":{"name":"admin","@id":"https:\/\/ntrigo.com\/blog\/#\/schema\/person\/ed9591b6fc8456fc58fae61be7cb0770"},"headline":"You Don&#8217;t Have to Click a Phishing Email to Be Phished","datePublished":"2026-09-23T05:10:01+00:00","dateModified":"2026-09-23T05:10:02+00:00","mainEntityOfPage":{"@id":"https:\/\/ntrigo.com\/blog\/you-dont-have-to-click-a-phishing-email-to-be-phished\/"},"wordCount":309,"commentCount":0,"publisher":{"@id":"https:\/\/ntrigo.com\/blog\/#organization"},"image":{"@id":"https:\/\/ntrigo.com\/blog\/you-dont-have-to-click-a-phishing-email-to-be-phished\/#primaryimage"},"thumbnailUrl":"https:\/\/ntrigo.com\/blog\/wp-content\/uploads\/2026\/09\/598945641.jpg","inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/ntrigo.com\/blog\/you-dont-have-to-click-a-phishing-email-to-be-phished\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/ntrigo.com\/blog\/you-dont-have-to-click-a-phishing-email-to-be-phished\/","url":"https:\/\/ntrigo.com\/blog\/you-dont-have-to-click-a-phishing-email-to-be-phished\/","name":"You Don't Have to Click a Phishing Email to Be Phished - NTrigo Security Blog","isPartOf":{"@id":"https:\/\/ntrigo.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/ntrigo.com\/blog\/you-dont-have-to-click-a-phishing-email-to-be-phished\/#primaryimage"},"image":{"@id":"https:\/\/ntrigo.com\/blog\/you-dont-have-to-click-a-phishing-email-to-be-phished\/#primaryimage"},"thumbnailUrl":"https:\/\/ntrigo.com\/blog\/wp-content\/uploads\/2026\/09\/598945641.jpg","datePublished":"2026-09-23T05:10:01+00:00","dateModified":"2026-09-23T05:10:02+00:00","breadcrumb":{"@id":"https:\/\/ntrigo.com\/blog\/you-dont-have-to-click-a-phishing-email-to-be-phished\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/ntrigo.com\/blog\/you-dont-have-to-click-a-phishing-email-to-be-phished\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/ntrigo.com\/blog\/you-dont-have-to-click-a-phishing-email-to-be-phished\/#primaryimage","url":"https:\/\/ntrigo.com\/blog\/wp-content\/uploads\/2026\/09\/598945641.jpg","contentUrl":"https:\/\/ntrigo.com\/blog\/wp-content\/uploads\/2026\/09\/598945641.jpg","width":768,"height":768},{"@type":"BreadcrumbList","@id":"https:\/\/ntrigo.com\/blog\/you-dont-have-to-click-a-phishing-email-to-be-phished\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/ntrigo.com\/blog\/"},{"@type":"ListItem","position":2,"name":"You Don&#8217;t Have to Click a Phishing Email to Be Phished"}]},{"@type":"WebSite","@id":"https:\/\/ntrigo.com\/blog\/#website","url":"https:\/\/ntrigo.com\/blog\/","name":"NTrigo Security Blog","description":"NTrigo Security Blog","publisher":{"@id":"https:\/\/ntrigo.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/ntrigo.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/ntrigo.com\/blog\/#organization","name":"NTrigo Security Blog","url":"https:\/\/ntrigo.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/ntrigo.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/ntrigo.com\/blog\/wp-content\/uploads\/2026\/01\/NTrigo-Blog.png","contentUrl":"https:\/\/ntrigo.com\/blog\/wp-content\/uploads\/2026\/01\/NTrigo-Blog.png","width":148,"height":95,"caption":"NTrigo Security Blog"},"image":{"@id":"https:\/\/ntrigo.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/nTrigoSoftware\/"]},{"@type":"Person","@id":"https:\/\/ntrigo.com\/blog\/#\/schema\/person\/ed9591b6fc8456fc58fae61be7cb0770","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/0049ab18a7fc704da3bcaaaaf62c9b51301fd388c1e23acc3c15e39b6279ef6a?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/0049ab18a7fc704da3bcaaaaf62c9b51301fd388c1e23acc3c15e39b6279ef6a?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/0049ab18a7fc704da3bcaaaaf62c9b51301fd388c1e23acc3c15e39b6279ef6a?s=96&d=mm&r=g","caption":"admin"},"sameAs":["https:\/\/ntrigo.com\/blog"],"url":"https:\/\/ntrigo.com\/blog\/author\/admin\/"}]}},"_links":{"self":[{"href":"https:\/\/ntrigo.com\/blog\/wp-json\/wp\/v2\/posts\/375","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ntrigo.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ntrigo.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ntrigo.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ntrigo.com\/blog\/wp-json\/wp\/v2\/comments?post=375"}],"version-history":[{"count":1,"href":"https:\/\/ntrigo.com\/blog\/wp-json\/wp\/v2\/posts\/375\/revisions"}],"predecessor-version":[{"id":377,"href":"https:\/\/ntrigo.com\/blog\/wp-json\/wp\/v2\/posts\/375\/revisions\/377"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ntrigo.com\/blog\/wp-json\/wp\/v2\/media\/376"}],"wp:attachment":[{"href":"https:\/\/ntrigo.com\/blog\/wp-json\/wp\/v2\/media?parent=375"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ntrigo.com\/blog\/wp-json\/wp\/v2\/categories?post=375"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ntrigo.com\/blog\/wp-json\/wp\/v2\/tags?post=375"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}