Crossing the Andes: Sophisticated Loan Phishing Scams Hit Peru

Group-IB reports a sophisticated phishing campaign in Peru that lures loan-seekers via targeted social ads to imitation bank websites that harvest usable credit card numbers and PINs; attackers employ client-side validation (Luhn checksum), modular JavaScript endpoints and short-lived subdirectory hosting, with roughly 370 domains identified and expansion into other Latin American targets.