publishing date icon
September 29, 2023
read time icon
5 min. read

Threat feed week 39: Walmart, MobilePay, Proofpoint, iCloud, and National Bank of Greece impersonations

Author image
Threat Analyst Team
Post hero image

Table of contents

share this post

Walmart impersonation

Hox rating: ★✩✩✩

Threat type: Bulk phishing

Payload: Malicious phone number

Region: North-America

Analyst: Sampo Lenkola

Date: 22.09.2023

This email impersonates Walmart. It attempts to create a scenario where the recipient ordered products from Walmart.

To cancel the order, the recipient has to call a malicious phone number.

MobilePay impersonation

Hox rating: ★★✩✩

Threat type: Smishing

Payload: Malicious link

Region: Nordics

Analyst: Minna Herlevi

Date: 24.09.2023

This smishing message is impersonating MobilePay. It claims that the recipient’s account is locked and that they must follow the provided link to unlock the account.

MobilePay impersonation

The language used is poor, but the payload link looks legitimate at first glance.

Proofpoint secure message impersonation

Hox rating: ★★✩✩

Threat type: Advanced campaign

Payload: Malicious attachment

Region: Global

Analyst: Kaarlo Mahlberg

Date: 26.09.2023

This phishing email is impersonating a Proofpoint secure message. The email originates from a spoofed business email.

Proofpoint secure message impersonation

The attachment name is identical to the one used by Proofpoint in secure messages.

National Bank of Greece impersonation

Hox rating: ★✩✩✩

Threat type: Bulk phishing

Payload: Malicious link

Region: Greece

Analyst: Siiri Latola

Date: 27.09.2023

This phishing email impersonates the National Bank of Greece.

National Bank of Greece impersonation

It claims that if the customer doesn’t register for new security measures, their account activities will be blocked.

iCloud impersonation

Hox rating: ★★✩✩

Threat type: Bulk phishing

Payload: Malicious link

Region: DACH

Analyst: Minna Herlevi

Date: 29.09.2023

This German iCloud impersonation claims that the user is running out of storage on their account.

They're tempted with free extra storage if they click the link. There’s also a threat of losing all their files if they fail to get more storage in time.

Keep up with the threat feed

Don’t miss the next threat feed, and subscribe to our newsletter for the latest feed and cybersecurity content. Stay informed and stay safe!

Subscribe to Threat Feed

Subscribe to Hoxhunt's Threat Feed to get the latest phishing threats delivered to your inbox, every Friday.

Form CTA

Hoxhunt needs the contact information you provide to us to contact you about our products and services. You may unsubscribe from these communications at anytime. For information on how to unsubscribe, as well as our privacy practices and commitment to protecting your privacy, check out our Privacy Policy.