THREATOPS
THREAT OPS › Threat News › GitBait: Phishing the Mexican Financial Sector

GitBait: Phishing the Mexican Financial Sector

lowgroupib_blog

A modular phishing infrastructure targeting multiple Mexican banks has been uncovered, abusing GitHub-hosted Pages, employing obfuscated scripts, and featuring a centralized credential exfiltration via SheetBest API, indicating a scalable and persistent multi-brand phishing operation.

Original source: https://www.group-ib.com/blog/gitbait-phishing-mexico-banking-finance/