Intel Name: Phishing pages targeting online shoppers
Date of Scan: January 28, 2025
Impact: High
Summary: This campaign impersonates popular online shopping sites by displaying fake login pages that share a common design template. These pages request a phone number and password from the victim. According to our telemetry, web pages using this template have been active since at least November 2024. Once login credentials are entered, the pages return a hard-coded message stating, “The account does not exist.” Instead of authenticating with the legitimate shopping site, the page’s code transmits the user’s information to the local host (the web server).
