The Supercar Phishing Kit: A Luxurious Trap for Your Microsoft 365 Credentials

Fortgale researchers uncovered the "Supercar Phishing Kit," a phishing-as-a-service campaign attributed to the actor "Supercar Nebula" that uses HTML attachments to display fake Microsoft 365 login pages and exfiltrate credentials to luxury car–themed domains; the infrastructure comprises ~2,900 domains and Cloudflare-protected control panels, enabling large-scale targeting of corporate Microsoft 365 users (notably in Italy).