As cited
Copy frozen at (site build).
threat intel
Phishing Campaign Actively Targets Customers of 300 US Banks
Researchers identified a phishing campaign active since May that spoofs login pages for 300 U.S. banks and cryptocurrency exchanges. The fraudulent pages redirect to an 'account suspended' message when security scanners are detected, a technique designed to evade automated detection. Attackers use the campaign to harvest login credentials for unauthorized account access and theft.
Why it matters: Bank customers and cryptocurrency platform users face immediate credential theft risk if they visit spoofed login pages; security teams should monitor for phishing emails directing traffic to these counterfeit domains and educate users on verifying legitimate bank URLs before entering credentials.
- First seen by Cybersecurity Tracker