Multi-channel phishing pivots: are siloed controls keeping up?

TL;DR: Attackers now pivot from blocked email lures to SMS, collaboration apps and deepfake voice calls within minutes, exposing the limits of channel-siloed defences and manual correlation, according to Doppel. The operational answer is campaign-level detection that tracks infrastructure, identity cues and distribution channels together, then disrupts the attack before it changes lanes.

Editorial analysis by NHI Mgmt Group, based on content published by Doppel: “How AI Agents Track Multi-Channel Phishing Attacks”.

Key questions

Q: What breaks when phishing lures are blocked in one channel but attackers pivot elsewhere?

A: What breaks is the assumption that a single control can contain a campaign.

Q: Why do multi-stage phishing campaigns that move across email, chat, calendar, and cloud apps increase the risk of credential theft?

A: Multi-stage phishing increases risk because each step looks routine in isolation, which lowers suspicion and bypasses controls tuned for a single malicious email.

Q: How can security teams detect Social Engineering Attack?

A: Security teams can detect Social Engineering Attack by watching for unusual requests to reset credentials, change payment details, approve MFA prompts, or bypass process controls.

Practitioner guidance

• Correlate campaigns across all inbound channels Link email, SMS, collaboration platforms and voice events to the same campaign record so blocked lures are not treated as isolated incidents.
• Pre-authorise infrastructure takedown actions Define policy thresholds that allow suspension requests for domains, hosting and paid ads when the campaign confidence is high enough.
• Harden executive approval paths Require secondary verification for MFA approvals, payment requests and urgent access approvals that arrive through voice or chat.

Bottom line: Attackers no longer need to win in one channel because they can pivot across email, SMS, collaboration tools and voice until a lure succeeds.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →