[REVISION HISTORY]

Global phishing campaigns targeting corporate and travel 데이터

Updated 1 time since CLSTR started tracking revisions of this situation.

What changed

2026-10-05 10:23 UTC → 2026-10-06 07:33 UTC · added ~~removed~~

Kaspersky has identified multiple phishing campaigns utilizing impersonation tactics to steal sensitive data. In late September 2026, a campaign was detected targeting corporate accounts in regions including the Middle East, Latin America, Western Europe, Russia, Armenia, and Azerbaijan. This attack used fraudulent DocuSign messages to steal credentials and Zoom notifications to create a sense of urgency regarding account suspensions. These methods included redirecting users to fake pages or using embedded forms to collect personal and credit card information. By early October 2026, a new campaign emerged targeting tourists applying for Schengen visas. ~~These scammers~~ Scammers impersonate European Union immigration authorities, claiming that travelers must submit a digital migration declaration due to new border rules. The fraudulent emails mimic the EU’s Entry/Exit System (EES) to direct victims to fake portals where they are prompted to provide personal data and passport scans under threat of border inspections or entry denials. On October 5, 2026, Kaspersky’s Global Research and Analysis Team (GReAT) noted that these phishing messages exploit the legitimacy of the EES, which began operations in April 2026. The attackers use websites designed to mimic official EU portals using European Union imagery. The campaign is multilingual, targeting speakers of English, Turkish, Arabic, Chinese, and Spanish. Experts warn that the stolen data, including travel dates and passport scans, could be used for identity theft or financial fraud.

Versions

Only revisions since CLSTR began indexing content versions appear here. Select a version to see what changed compared to the one before it.