LOWE'S EMPLOYEES PHISHED VIA GOOGLE ADS

Summary from the TLDR InfoSec newsletter

Malwarebytes detected a phishing campaign targeting Lowe's employees by masquerading as the Lowe's benefits portal. The attackers registered domains to common typos of MyLowesLife and bought Google Ads to have them show up in search results for MyLowesLife. The bogus domains were then used to steal login credentials from employees.