State-Sponsored Phishing Campaigns Target 40,000 VIP Individuals

Menlo Security uncovered three sophisticated, likely state-sponsored phishing campaigns—LegalQloud, Eqoop, and Boomer—targeting roughly 40,000 high-value users across government, banking, insurance, legal, healthcare, logistics, and research sectors. The operations include Microsoft impersonation, credential theft, MFA bypass (Eqoop), and advanced evasive techniques such as dynamic phishing sites, server-side logic, bot-detection countermeasures, and encrypted code; one campaign is hosted on Tencent Cloud and another accounted for nearly 50,000 observed attacks.