Technique library
42 techniques, including 10 campaigns reported in Switzerland. Each entry gives the mechanism, who it targets and why it works, red flags ranked strongest first, and the single check that defeats it.
42 techniques
A — Targeting — who the message is written for
B — Channel — how the lure arrives
C — Technical and infrastructure mechanisms
D — Emerging in 2025–2026
E — Observed in Switzerland — campaigns actually reported
These entries reproduce phishing campaigns that were publicly reported in Switzerland, with the source and date named on each. The companies shown as senders are the victims of the impersonation, not the senders — that is the attack, and using the real brand is the point: Swiss staff are phished as Die Post and SwissPass, not as invented companies. Attacker domains are invented but shape-accurate, and every link is defanged, so nothing here can be clicked through to anything.
No publicly reported campaign could be found impersonating Baloise, BKW or Energie Wasser Bern. Those three are deliberately absent rather than invented.