Watch out for AT&T rewards phishing text that wants your personal details

This report analyzes an active SMS phishing campaign impersonating AT&T that directs victims to a convincingly cloned site (att.hgfxp.cc) which uses obfuscated JavaScript and real-time form validation to harvest personal and payment data, transmitting it as JSON to an attacker-controlled endpoint (/api/open/cvvInterface); the write-up includes attack flow, indicators, and user defense recommendations.