Phishing Scam Uses Clean Emails and PDFs to Steal Dropbox Logins

### Executive Summary Forcepoint researchers uncovered a coordinated phishing campaign that embeds hidden clickable elements in professional PDF attachments to redirect users through Vercel Blob-hosted content to a realistic fake Dropbox login page; credentials, IP/location, and device data are captured and sent to a hardcoded Telegram bot while victims see a misleading error message.