GitBait phishing campaign used GitHub Pages to steal data from Mexican bank customers
Group-IB described the approximately three-year GitBait campaign, which targeted customers of at least 12 financial institutions in Mexico. The campaign hosted fake bank pages on GitHub Pages and sent stolen login data through SheetBest to Google Sheets.
CERT24