[1/3] Netskope Threat Labs observed multiple phishing pages being sent via Fastmail. The pages are tricking victims to log into a fake Office 365 page in order to access a fake payment document. Once the victim insert the credentials and press "View Payment" the credentials are sent to the attacker.

🧵 [1/2] Netskope Threat Labs observed a Duck DNS URL used to host a fake CAPTCHA page that redirects to a website disguised as Orange, a french Telecom company. The page asks for Orange user's credentials and contains a malicious JS script to exfiltrate the inserted data via Telegram API.

#phishing

The first Security Visionaries episode of 2025 kicks off with a conversation with Ben Morris, Group Head of Cyber Security for @worldrugby.bsky.social, about the intersection between cyber and physical security when it comes to major events.

🎧 Listen: www.netskope.com/resources/po...

In this episode of the Security Visionaries podcast, host Max Havey and guest @rcanzanese.bsky.social, Director of Netskope Threat Labs, dive into threat trends from the past year, including AI-enabled threats, deepfakes, and nation-state attacks.

🎧 Listen now: www.netskope.com/resources/po...