Hackers abuse Google ads for GoDaddy ManageWP login phishing
ID: 6a895625-23f2-54c9-b6b8-1103d58bd9d5
STIX ID: report--6a895625-23f2-54c9-b6b8-1103d58bd9d5
Feed Name: Bleeping Computer
Threat Score
**Phishing campaign abusing Google Ads to perform AiTM credential theft against ManageWP:** A malicious sponsored search result leads victims to a real-time proxy login page that relays credentials and 2FA prompts to attackers (exfiltrated via Telegram), enabling immediate account takeover; Guardio Labs observed a private operator-driven phishing framework/C2 and confirmed ~200 victims.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.