ImpersonationReviewed
Lab539 links 380+ domains to fake bank support sites and infrastructure pushing remote-access software
BankInfoSecurity reported on October 20, 2026 on new research from British threat intelligence firm Lab539 into a phone-led fraud operation targeting banking customers that has been live since at least March. Lab539 s…
- verify_call.exe posing as 'ShieldWall Defender'; FraudReport.zip with malicious mpclient.dll
Reported Oct 20, 20261 report