Milk Dragon Phishing Campaign Targets 66 Countries

Security researchers Group-IB identified a threat actor named Milk Dragon running a sophisticated phishing campaign across 66 countries. The group uses fake social media posts to lure victims into spoofed sites for brands like Lego and Calvin Klein. Malware called BytePress captures credentials and MFA codes in real time, bypassing security measures to steal financial data from users globally.