Phishers Take Advantage of Iberian Blackout Before It's Even Over

Threat actors are exploiting a Europe-wide power outage to run a phishing campaign impersonating TAP Air Portugal. Emails in Portuguese and Spanish lure victims with bogus flight-compensation claims linking to credential- and payment-data-harvesting pages hosted on compromised WordPress sites; no malware or further redirects were observed, indicating the primary intent is data theft via social engineering.