‘Picture-in-Picture’ Obfuscation Spoofs Delta, Kohl’s for Credential Harvesting Security Aid June 5, 2023 1 minute read A recent campaign tricks victims into visiting credential harvesting sites by hiding malicious URLs behind photos advertising deals from trusted brands. Read More About The Author Security Aid See author's posts Related Post navigation Previous: ‘PostalFurious’ SMS Attacks Target UAE Citizens for Data TheftNext: Streamers Ditch Netflix for Dark Web After Password Sharing Ban Related Stories QuickLens Chrome extension steals crypto, shows ClickFix attack Security Aid February 28, 2026 ClawJacked Flaw Lets Malicious Sites Hijack Local OpenClaw AI Agents via WebSocket Security Aid February 28, 2026 $4.8M in crypto stolen after Korean tax agency exposes wallet seed Security Aid February 28, 2026