Multifaceted Phishing Scheme Deceives Bitpanda Customers

A Cofense advisory outlines a sophisticated phishing campaign targeting Bitpanda users that uses branded emails and a near-perfect fraudulent site to capture credentials and staged MFA screens to harvest PII (name, phone, address, DOB). After capture victims see a success message and are redirected to the real Bitpanda login; mitigations include link verification, checking sender domains, using bookmarks to access services, and deploying email threat detection and quarantine solutions.