← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Inside a Fake DHL Campaign Built to Steal Credentials
WHITE Tr1sa111 2026-04-30 Modified: 2026-04-30
3
IOCs
LOW VOLUME
social engineeringphishing campaignclient-side theftemailjs exfiltrationcredential harvestingbrand impersonationfake otpdhl impersonation
Indicators of Compromise (3)
All URL domain
TYPEINDICATORDESCRIPTIONCREATED
URL http://biotechgroup.net/ — 2026-04-30
domain biotechgroup.net — 2026-04-30
domain perfectgoc.com — 2026-04-30
References (1)
↗ https://www.forcepoint.com/blog/x-labs/fake-dhl-phishing-campaign-credential-theft