TLDR Tech / InfoSec
Fake Boots Emails Target Millions in Phishing Campaign
Nearly 8.9M users received an email supposedly from the UK health and beauty retailer Boots as part of a phishing campaign linked to Romanian threat actors. The emails offered users a free beauty sample pack and directed them to a fraudulent checkout process and a customer survey, which the threat actors used to harvest information. The threat actors hosted the checkout page on a compromised Bolivian government web page and installed a bulk mailing service on a compromised UK business terminal server.
Read the full story