Search results

1 report for “PhantomDOM BitM phishing kit; SharePoint-themed HR benefits-enrollment PDF lure”

Searched by keyword.

PhantomDOM browser-in-the-middle kit hijacks Microsoft 365 logins via SharePoint HR benefits PDF

PhishU, citing ZeroBEC, describes PhantomDOM, a browser-in-the-middle kit that steals Microsoft 365 sessions via SharePoint HR benefits PDF lures. Microsoft is not involved.

PhantomDOM BitM phishing kit; SharePoint-themed HR benefits-enrollment PDF lure

Reported Nov 8, 20261 report

Results reflect reports submitted to Scammers.com. Entries marked “Unverified” have not yet been reviewed. A listing is not a finding that any person or business committed fraud.