Smishing Alert: Telegram Bots Power New PNB MetLife Phishing Campaign

A widespread phishing campaign impersonating PNB MetLife uses SMS lures and mobile-optimized fake payment pages to steal personal and banking data and to coerce UPI payments; stolen data is exfiltrated in real time via hardcoded Telegram bots (e.g., pnbmetlifesbot, goldenxspy_bot) and operator accounts (darkdevil_pnb, prabhatspy), while clipboard manipulation and deep links prime victims to send funds. The attackers host and rapidly rotate pages on EdgeOne Pages, and a more dangerous variant captures full bank and card details for broader financial fraud.