Delivery Deception: Escalating cybercriminal tactics in the Balkan region

Group-IB researchers observed a widespread phishing campaign targeting postal service users across the Balkans (notably Pošta Srbije, and services in Croatia, Romania, Slovenia) where victims receive urgent “failed delivery” emails directing them to near-identical phishing websites that harvest personal and financial information and request payment; the blog includes screenshots, notes active malicious email infrastructure, and provides user- and business-focused mitigation recommendations.