‘Picture-in-Picture’ Obfuscation Spoofs Delta, Kohl’s for Credential Harvesting Security Aid June 5, 2023 1 minute read A recent campaign tricks victims into visiting credential harvesting sites by hiding malicious URLs behind photos advertising deals from trusted brands. Read More About The Author Security Aid See author's posts Related Post navigation Previous: ‘PostalFurious’ SMS Attacks Target UAE Citizens for Data TheftNext: Streamers Ditch Netflix for Dark Web After Password Sharing Ban Related Stories Google Drive ransomware detection now on by default for paying users Security Aid April 1, 2026 Claude Code Source Leaked via npm Packaging Error, Anthropic Confirms Security Aid April 1, 2026 Claude Code source code accidentally leaked in NPM package Security Aid April 1, 2026