The Water Makara spear-phishing campaign, recently identified by Trend Micro, targets victims using social engineering tactics and obfuscated JavaScript files. The attack entices victims to click malicious links or download harmful attachments, ultimately leading to credential theft and data compromise. Zimperium’s on-device phishing detection engine effectively classified 100% of the malicious URLs in the campaign as malicious, identifying them in a zero-day capacity. This highlights the effectiveness of Zimperium’s AI-powered solution in delivering comprehensive, real-time protection against sophisticated phishing attacks.