Beware: Mobile Phishing Mimicking the USPS Is On the Rise

Researchers at Zimperium reported a large-scale phishing campaign impersonating the US Postal Service that embeds malicious, clickable links in PDFs to route mobile users to spoofed USPS pages for harvesting personal data; the campaign includes over 20 malicious PDFs and 630 phishing pages and uses a novel obfuscation technique that omits the standard /URI tag in PDFs to evade endpoint detection, posing a cross-border risk to organizations in 50+ countries.