Operation DoppelBrand Weaponizes Trusted Brands For Credential Theft

2026-02-17

Operation DoppelBrand is a GS7-run phishing operation that abuses lookalike domains and cloned portals of major US banks, insurers, and tech firms to steal credentials and device data, then pipe them into Telegram for triage.