A phishing campaign targeting residents in Saudi Arabia impersonates Saudi Post (SPL) via SMS to steal personal information and credit card data through a fake “address correction” page. The attack uses realistic clones of the official SPL portal to harvest credentials and intercept one-time passwords (OTPs) for fraudulent transactions. These phishing cases highlight attackers’ use …
Author Archives: Anti-phishing
Fake Emirates Post pages detected
Threat Analysis: Emirates Post Phishing â Small Fee & Card Harvesting How it works:The victim receives an SMS, email, or messaging app alert claiming a package requires a small delivery fee or customs payment. The link leads to this page, which mimics the Emirates Post payment interface. The victim is asked to provide: Logos for …
Fake Carrefour page revealed
This phishing campaign against Carrefour uses a “reward survey” scheme to steal credit card data and register victims for hidden subscriptions, often promoted via social media. The multi-stage attack involves fake surveys and “lucky” games, designed to trick users into paying a small shipping fee, which is actually a pretext to capture sensitive banking information. …
Microsoft phishing page in Spanish detected
This screenshot shows a Spanishâlanguage phishing page designed to steal email credentials (correo electrĂłnico and contraseĂąa). The page is minimal and generic, making it adaptable to impersonate various services (Microsoft, Google, a bank, or an email provider). Threat Analysis: Generic âInicio de seguridadâ Phishing â Credential Harvesting How it works:The victim receives a phishing email, …
Continue reading “Microsoft phishing page in Spanish detected”
IAA phishing page detected (Online car marketplace)
This screenshot shows a phishing page impersonating IAA (Insurance Auto Auctions) , a legitimate online vehicle auction platform. The page is designed to steal victimsâ login credentials (email and password) used to access their IAA accounts. Threat Analysis: IAA Phishing â Credential Harvesting How it works:The victim receives a phishing email, SMS, or message claiming …
Continue reading “IAA phishing page detected (Online car marketplace)”
DHL phishing page revealed
This screenshot shows a phishing page impersonating DHL, targeting users with a fake package delivery notification. The scam demands a small payment (1.99) to complete delivery and collects full card details, cardholder name, and an ID number (likely a national ID or passport). Threat Analysis: DHL Phishing â Fake âDelivery Confirmationâ & Card Harvesting How …
Twitter fake login page detected
This screenshot shows a phishing page impersonating Twitter (now X) , designed to steal login credentials (email/phone/username and password). The page is hosted on a suspicious domain unrelated to Twitter. Threat Analysis: Twitter Phishing â Credential Harvesting How it works:The victim receives a phishing email, SMS, or direct message claiming a security alert, account suspension, …
Gmail phishing page detected
This screenshot shows a phishing page impersonating Google / Gmail, targeting users who read Arabic and French (likely in North Africa or the Middle East). The page asks for email/phone and password to steal login credentials. Threat Analysis: Google/Gmail Phishing â Credential Harvesting How it works:The victim receives a phishing email, SMS, or message claiming …
Fake Microsoft account creation page detected
This phishing campaign utilizes a high-fidelity clone of the Microsoft account creation page to steal user credentials, personal data, and backup contact information under the guise of creating a new profile. The fake form, which often appears after clicking a deceptive link, captures the “new” password, which is frequently a recycled, primary password, along with …
Continue reading “Fake Microsoft account creation page detected”
Fake increasing of Instagram subscribers in Thai
This screenshot shows a phishing page in Arabic that promises to increase the number of followers for a social media account (likely Instagram, TikTok, or Twitter). The victim is asked to provide their username, password, and desired number of followers â a classic credentialâharvesting scam. Threat Analysis: Social Media Follower Booster Phishing â Credential Harvesting …
Continue reading “Fake increasing of Instagram subscribers in Thai”