THREAT SPOTLIGHT: HIJACKED ROUTERS AND FAKE SEARCHES FUELING PAYROLL HEIST

Summary from the TLDR InfoSec newsletter

ReliaQuest has discovered a campaign that uses SEO poisoning to target employee mobile devices for payroll fraud. Attackers create fake company login pages that appear in search results, steal credentials when employees access them, and then redirect paychecks to attacker-controlled accounts. This post dives into the campaign, the attacks, and how they keep evading detection.