‘Picture-in-Picture’ Obfuscation Spoofs Delta, Kohl’s for Credential Harvesting Security Aid June 5, 2023 1 minute read A recent campaign tricks victims into visiting credential harvesting sites by hiding malicious URLs behind photos advertising deals from trusted brands. Read More About The Author Security Aid See author's posts Related Post navigation Previous: ‘PostalFurious’ SMS Attacks Target UAE Citizens for Data TheftNext: Streamers Ditch Netflix for Dark Web After Password Sharing Ban Related Stories Progress Patches Multiple Vulnerabilities in MOVEit WAF, LoadMaster Security Aid April 21, 2026 No Exploit Needed: How Attackers Walk Through the Front Door via Identity-Based Attacks Security Aid April 21, 2026 Actively exploited Apache ActiveMQ flaw impacts 6,400 servers Security Aid April 21, 2026