OPERATION DOPPELBRAND WEAPONIZES TRUSTED BRANDS FOR CREDENTIAL THEFT

Summary from the TLDR InfoSec newsletter

Operation DoppelBrand is a GS7-run phishing operation that abuses lookalike domains and cloned portals of major US banks, insurers, and tech firms to steal credentials and device data, then pipe them into Telegram for triage.