Crédit Mutuel de Bretagne (CMB) “Security Key” PhishingTarget: Customers of Crédit Mutuel de Bretagne (France / Brittany region)Threat Level: Critical (Real-time Account Takeover & “Clé Digitale” Hijacking)Phishing Method DescriptionThis attack targets users of the CMB Online Banking and the “CMB suivi de compte” mobile app. Scammers use a “Security Alert” pretext, sending out Smishing (SMS) …
Continue reading “Crédit Mutuel de Bretagne (CMB) bank phishing page detected”
Booking.com “Internal Messaging” PhishingTarget: Travelers and Hospitality Partners WorldwideThreat Level: Critical (Authorized Account Access & Financial Fraud)Phishing Method DescriptionThis is a Multi-Stage Attack that exploits a chain of trust. Unlike typical phishing, the fraudulent message arrives directly within the official Booking.com app or your reservation chat.Phase 1 (The Initial Breach): Attackers first compromise a hotel’s …
Raiffeisen Bank “Digital Security Update” PhishingTarget: Raiffeisen Bank Customers (Central and Eastern Europe)Threat Level: Critical (Raiffeisen Identity & Digital Token Theft)Phishing Method DescriptionThis attack targets users of the Raiffeisen Online Banking and the Digital ID apps. Scammers distribute urgent notifications via SMS (Smishing) or Email, claiming that “New Security Regulations” or a “System Maintenance” requires …
Bankinter Portugal “Security Alert” PhishingTarget: Bankinter Customers in PortugalThreat Level: Critical (Real-time Account Takeover & SMS OTP Theft)Phishing Method DescriptionThis attack targets users of Bankinter Particulares (Online Banking). Scammers use a “Fraud Alert” pretext, sending out Smishing (SMS) messages claiming that an “unauthorized access” or “unusual purchase” has been detected. To “cancel” the transaction or …
Continue reading “Bankinter phishing page in Portuguese revealed”
OTP Bank “Account Access Verification” PhishingTarget: OTP Bank Customers (Hungary, Russia, Romania, Serbia, etc.)Threat Level: Critical (Real-time OTP Interception & Account Hijacking) Phishing Method DescriptionThis attack relies on Psychological Pressure. Victims receive a Smishing (SMS) or Email claiming that their “OTPdirekt access has been suspended” or that a “Suspicious login attempt” was detected from a …
