Fake Airbus account activation email leads to Gmail-style phishing page on pencontrol.com
PCrisk reports a phishing email titled "Creation of your Airbus account" that claims the recipient has been registered as a new user on an Airbus web portal and must click to activate the account. The activation butto…
- First reported
- Reports
- 1
Source: pcrisk.com · published
What happened
PCrisk reports a phishing email titled "Creation of your Airbus account" that claims the recipient has been registered as a new user on an Airbus web portal and must click to activate the account. The activation button leads to a page hosted at pencontrol.com showing an "Authentication Required" sign-in overlay styled like Gmail, which captures email login credentials. The message includes a "Your login parameters" line with a username and sign-off from "Airbus". Airbus SE is impersonated and has no connection with the campaign; PCrisk does not accuse it of any wrongdoing. The sample email's sender address belongs to an unrelated domain.
How the scam works
The message is a welcome email for an account the recipient never created. It talks about ordering products and tracking orders through a "web portal", a believable business-to-business scenario, and the "Click here to activate your account" button invites a quick click. The destination is an overlay on pencontrol.com showing a Gmail-style "Authentication Required" prompt, which has nothing to do with Airbus. A fake login screen styled for the victim's email provider is the real aim, because an email password can unlock many other accounts through "forgot password" links.
PCrisk's conclusion is that the "Airbus Account Activation Email Scam" is a fraudulent message impersonating a major aerospace company to steal email login credentials. Recipients should not click any links or provide any details. It adds that campaigns of this type are sometimes used to distribute malware rather than, or in addition to, harvesting credentials.
If you do not do business with the company named, treat an account-creation notice as a red flag, and never type a different service's password (here, your email password) into a page that was reached through a link in the message.
Source
PCrisk, "Airbus Account Activation Email Scam" (removal guide, 27 October 2026).
Red flags
- A welcome email for an account you never registered.
- An activation link that leads to a page unrelated to the company named.
- A sign-in prompt for your email provider on a page about something else (here styled like Gmail).
- A sender address that isn't from the company's own domain.
- Generic wording such as 'Welcome sir' and a vague 'web portal'.
If you were targeted
- 1Don't click the activation link or enter any password.
- 2If you entered your email login, change the password immediately and sign out of other sessions.
- 3Turn on two-step verification for your email account and check for unknown forwarding rules.
- 4If you do business with the company, contact it using details from its official website.
- 5Report the email as phishing and delete it.