TLDR Tech / InfoSec
Over 500 Organizations Hit in Years-Long Phishing Campaign (3 minute read)
A four‑year phishing operation, dubbed Operation HookedWing, has stolen more than 2,000 credentials from users at over 500 organizations across aviation, critical infrastructure, energy, finance, government, logistics, and tech sectors. The actor uses HR- or colleague-themed emails that link to GitHub-hosted pages mimicking Outlook, with loaders customized per victim organization. Landing pages validate data, inject PHP forms, capture credentials, IP addresses, and geolocation data, and send full records to attacker C2 servers.
Read the full story