‘Picture-in-Picture’ Obfuscation Spoofs Delta, Kohl’s for Credential Harvesting

A recent campaign tricks victims into visiting credential harvesting sites by hiding malicious URLs behind photos advertising deals from trusted brands.