Kaspersky has released a new threat review detailing the evolution of phishing tactics targeting enterprises in the Middle East. The report highlights the resurgence of calendar-based phishing, voice message scams, and sophisticated methods to bypass multi-factor authentication (MFA). These tactics are particularly concerning for fintech firms, digital asset platforms, and Web3 teams that rely on cloud services and email workflows. The analysis reveals that attackers are using calendar invites to auto-add malicious events to corporate calendars, while voice message phishing employs CAPTCHA chains to evade security tools. Additionally, MFA is being targeted through fake cloud service logins that interact with real APIs. Kaspersky emphasizes the need for enhanced employee training and advanced email protection to combat these threats, which are already active in the region.