'CoGUI' Phishing Kit Helps Chinese Hackers Target Japan

Proofpoint research reveals CoGUI, a China-linked phishing kit used in dozens of high-volume email campaigns that sent hundreds of millions of credential-phishing messages, concentrated on Japanese users; the kit fingerprints victims (IP, OS, language, browser, device type/size), impersonates major brands (Amazon, Apple, Rakuten, financial agencies), and uses diverse sender addresses to evade spam filters.