A new phishing scam uses clean emails with PDF attachments that contain hidden links, leading victims to fake Dropbox login pages hosted on Vercel cloud storage to steal credentials. The stolen data is then sent to a Telegram bot for the attackers.
Edward Kiledjian
@ekiledjian