---
id: 7678
title: "Phishing with Misfortune Cookies"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/social-engineering/phishing-with-misfortune-cookies/"
published_at: "2026-05-27T00:00:00Z"
tags: ["phishing", "red-team", "social-engineering", "session-hijacking", "awareness", "evilginx", "physical-attack"]
phying_url: "https://phying.com/item/7678"
lang: en
---

# Phishing with Misfortune Cookies

## Summary

Testers hid phishing codes in fortune cookies promising a $50 gift card, luring staff to a promo site that proxied the corporate login via Evilginx — physical media sidesteps email training.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2026-05-27T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/social-engineering/phishing-with-misfortune-cookies/
- **Phying News:** https://phying.com/item/7678