Monitor this situation.

Unsubscribe anytime.

[SITUATION] · [QUIET] · [TECHNOLOGY]

3 clusters · 12 sources · 26 days · First seen about 2 months ago · Last updated 28 days ago

Expanding phishing campaigns targeting European banks and de

Overview

Following the initial phishing waves in late July 2026 that targeted Lidl, PKO Bank Polski, and ING customers, cybercriminal activity in Poland has expanded to include utility providers and airlines.

On 24 August 2026, new reports indicated that scammers are impersonating the energy provider PGE by claiming customers are owed electricity overpayments to lure them into entering data on fraudulent websites. Additionally, CERT Orange Polska identified a social media campaign using Facebook advertisements to impersonate LOT Polish Airlines. These ads promise a premium card with 5,000 bonus miles to trick users into providing personal and credit card information via multi-stage fraudulent websites.

PKO Bank Polski continues to face threats, with warnings issued regarding fraudulent emails that use the bank’s name, logo, and contact details to distribute malicious Excel attachments or direct users to fake login pages designed to compromise accounts.

Entities

PKO Bank Polski · Polish companies · CERT Orange Polska · LOT Polish Airlines · PGE

Claims

What the coverage asserts, and how many sources carry each claim.

[○ 1 SOURCE] PKO Bank Polski is warning customers about phishing emails impersonating the bank. www.dobreprogramy.pl
[○ 1 SOURCE] Phishing emails may contain malicious Excel files or links to fake login pages. www.dobreprogramy.pl
[○ 1 SOURCE] Scammers are impersonating PGE energy provider by claiming customers have an electricity overpayment. www.fakt.pl
[○ 1 SOURCE] Cybercriminals are impersonating LOT Polish Airlines on Facebook to steal personal and payment data. www.gazetaprawna.pl
[○ 1 SOURCE] The LOT phishing scam offers a fake premium card with 5,000 bonus miles. www.gazetaprawna.pl

Timeline

28 days ago

[TECHNOLOGY] 3 sources
Poland faces multiple phishing campaigns targeting banks and utilities
Cybercriminals in Poland are launching various phishing attacks, impersonating PKO Bank Polski, PGE energy, and LOT Polish Airlines to steal sensitive personal and financial data.
about 2 months ago

[TECHNOLOGY] 2 sources
ING customers hit by phishing wave amid rising cyber attacks on safety systems
ING customers in Belgium face a phishing wave using urgent fake alerts, while experts note a shift toward cyber attacks that aim to undermine trust in safety systems, including alleged disruptions of Israeliair
about 2 months ago

[CRIME] 7 sources
Polish firms and bank customers hit by fake Lidl and PKO Bank phishing scams
Scammers in Poland are impersonating Lidl and PKO Bank in phishing attacks, sending fake collaboration offers and fraudulent operation confirmations with malicious Excel attachments, endangering company data &

Sources

beveiligingnieuws.nl · dobreprogramy.pl · fakt.pl · gazetaprawna.pl · instalki.pl · mobtech.interia.pl · mojeinwestycje.interia.pl · nieuws365.be · tech.wp.pl · telepolis.pl · tuzywiec.pl · wiadomoscihandlowe.pl

This summary has been updated 1 time: see revision history