Breaking the code: Multi-stage 'code of conduct' phishing campaign leads to AiTM token compromise

Reported 04 May 2026 by otx · Severity: medium

A sophisticated large-scale credential theft campaign targeted over 35,000 users across 13,000 organizations, primarily in the United States, between April 14-16, 2026. Attackers distributed fully authenticated emails from legitimate services using code of conduct-themed lures wi