What Happens When Cybercriminals Compromise a Sportswear Giant?

**Executive summary:** KnowBe4 analysts observed a large, coordinated phishing campaign (peak 955 emails) conducted from a compromised major sportswear brand domain between Oct 29–30, 2025; attackers used polymorphic subjects/payloads, varied sender addresses, and regional impersonation (UK Visa, Microsoft) to bypass SPF/DKIM/DMARC and secure email gateways and to harvest credentials via cloned web pages.