Multi-Stage AiTM Attack Uses Code Of Conduct Phishing Emails

Reported 06 May 2026 by otx · Severity: medium

A sophisticated credential theft campaign targeting over 35,000 users across 13,000 organizations was observed between April 14-16, 2026. The operation primarily impacted the United States, particularly healthcare and financial services sectors. Attackers used code of conduct the