Threat actors are leveraging fake digital invitations mimicking trusted brands like Paperless Post to redirect victims to credential harvesting sites. These phishing pages impersonate major login portals and utilize fake error messages to extract multiple sets of credentials, employing newly registered domains and URL shorteners to evade detection.
Newly Registered Domain
1 post
Punchbowl Phishing Attack Explained: How Digital Invites Are Used to Steal Credentials