Trust Hijacked: The Subtle Art of Phishing Through Familiar Facades

**Executive summary:** Group-IB details an ongoing, sophisticated phishing campaign that leverages trusted domains (e.g., Adobe, Google AMP), dynamic brand personalization (logo retrieval via APIs), and multi-layered redirects to bypass email gateways and harvest business credentials; the operation has distributed over 200 malicious links targeting 30+ brands across 12 industries and exfiltrates stolen credentials to attacker-controlled C2 servers and Telegram bots, with recommendations for user hygiene, 2FA, and enterprise detection/takedown measures.