A new phishing campaign has emerged that takes advantage of the trust placed in legitimate cloud hosting services like Cloudflare and ZenDesk. Threat actors have registered more than 600 malicious domains under the *.pages[.]dev domain structure, using typosquatting to impersonate customer support portals of well-known brands, making their attacks more convincing.
Researchers have documented that these phishing pages are likely generated using artificial intelligence, which increases their sophistication. The attackers employ a chat interface staffed by operators who request personal information from victims while masquerading as technical support. This information is used to instruct victims to install malicious software, granting attackers access to sensitive data and facilitating account takeovers. The campaign represents a serious threat to both enterprises and individuals, exemplifying how attackers evolve their techniques to overcome standard security measures.
👉 Pročitaj original: Cyber Security News