UK Home Office visa & immigration scam targets Sponsor Management System accounts · Blog · Sublime Security

Sublime’s Attack Spotlight details a widespread credential-phishing campaign targeting UK visa sponsors by impersonating the UK Home Office and directing victims to fake Sponsor Management System (SMS) login pages. The report describes lure variations (urgent notifications, expirations, forwarding instructions), phishing pages (including challenge pages and sms.php form submission), hosting patterns (compromised domains and Vercel apps), detection signals used by Sublime’s engine, and the potential individual, organizational, and national-security impacts of successful credential theft.