Phishing Campaign Targets Philippine Bank Users via Trusted Platforms

Severity: High (Score: 65.0)

Sources: Gbhackers, Cybersecuritynews

Summary

Since early 2024, a sophisticated phishing campaign has been targeting banking customers in the Philippines. Hackers exploit trusted online platforms to deceive users into revealing their banking credentials and one-time passwords. This method allows attackers to drain victims' accounts within minutes. Despite advancements in email security, phishing remains a prevalent threat due to its scalability and ease of execution. The campaign is still active as of April 2026, with no specific numbers on affected users or financial losses reported. The attackers utilize advanced techniques rather than simple tricks, indicating a high level of sophistication in their operations. Ongoing vigilance and improved security measures are necessary to combat this evolving threat. Key Points: • A phishing campaign targeting Philippine bank users has been active since early 2024. • Attackers exploit trusted online platforms to steal banking credentials and one-time passwords. • The campaign remains active in 2026, highlighting the persistent threat of phishing.

Key Entities

• Phishing (attack_type)
• Philippines (country)
• T1566 - Phishing (mitre_attack)