Inside a Fake DHL Campaign Built to Steal Credentials

Reported 28 Apr 2026 by otx · Severity: medium

A consumer-targeted credential theft operation uses DHL brand impersonation combined with a fake OTP verification mechanism to harvest passwords from victims. The attack employs an 11-step chain beginning with spoofed shipment notification emails, leading victims through a client