'This campaign works because it feels ordinary': Experts reveal how hackers use fake DHL messages to lure in victims

Illustration of a hooked email hovering over a mobile phone.

• A phishing campaign is spoofing DHL emails to steal login credentials
• Victims are tricked with a fake waybill confirmation and staged validation steps
• Captured data, including passwords and device details, is sent directly to attacker mailboxes

Forcepoint has published a report about an ongoing phishing campaign designed to steal people’s DHL login credentials.