Phishing in the Balkans: Fake Traffic Fines, Real Losses
ID: bf3c8224-5050-5a05-b51d-762b129a9712
STIX ID: report--bf3c8224-5050-5a05-b51d-762b129a9712
Feed Name: Group-IB Blog
Threat Score
Group-IB documents an active smishing campaign impersonating Putevi Srbije that directs victims to cloned payment portals to steal card details; analysis links the operation to Darcula and Phoenix PhaaS, details JavaScript-based content obfuscation used to evade scanners, provides numerous domain IOCs, and offers detection and remediation recommendations.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.