What changed
2026-08-02 07:12 UTC → 2026-08-25 15:47 UTC ·
added
removed
European bank Expanding phishing scams campaigns targeting European banks and de
On 29 July 2026, Polish cybercriminals launched coordinated Following the initial phishing campaigns waves in late July 2026 that spoofed retailer Lidl and targeted Lidl, PKO Bank Polski, sending fake collaboration invitations and malicious Excel attachments ING customers, cybercriminal activity in Poland has expanded to businesses include utility providers and consumers. Two days later, on 31 July airlines. On 24 August 2026, a separate wave targeted new reports indicated that scammers are impersonating the energy provider PGE by claiming customers of Dutch bank ING in Belgium, are owed electricity overpayments to lure them into entering data on fraudulent websites. Additionally, CERT Orange Polska identified a social media campaign using urgent messages Facebook advertisements to impersonate LOT Polish Airlines. These ads promise a premium card with countdown timers 5,000 bonus miles to trick users into providing personal and prompting victims credit card information via multi-stage fraudulent websites. PKO Bank Polski continues to call unknown numbers. Both incidents illustrate a widening pattern of phishing attacks on European financial institutions, prompting face threats, with warnings from issued regarding fraudulent emails that use the affected banks bank’s name, logo, and advice to verify sender contact details and avoid unexpected attachments. Analysts also noted a broader rise in cyber activity, including claims of attacks on safety‑critical systems, underscoring growing concerns about the use of deception to erode public trust. distribute malicious Excel attachments or direct users to fake login pages designed to compromise accounts.