Kaspersky Detects Multi-Stage Phishing in Manufacturing
Hackers use AI to steal data by posing as buyers
- Sophisticated multi-stage phishing hits the manufacturing sector globally.
- Hackers harvest corporate credentials via spoofed PDF cloud links.
- Attackers leverage AI tools to automate complex phishing schemes.
Global cyber security firm Kaspersky has detected a new and sophisticated 'multi-stage' phishing campaign targeting the manufacturing sector worldwide. According to the company's researchers, these cyber attacks are actively hitting manufacturing enterprises in various countries, including Malaysia, Egypt, the Czech Republic, and Russia. This malicious campaign, which initiated in April 2026, remains ongoing.
Kaspersky revealed that the attackers are blending advanced social engineering with modern technology. The threat actors initiate contact by sending emails in English, posing as potential buyers inquiring about product pricing or availability to gain the staff's trust. Once a company representative responds, the attackers move to the next stage by sending a file download link, claiming it contains technical specifications. Clicking the link redirects the user to a spoofed website designed to mimic a popular PDF cloud service. The victim is then prompted to log in with their corporate email and password under a security pretext, allowing the attackers to harvest sensitive corporate credentials.
"Phishing attacks are becoming increasingly complex," stated Roman Dedenok, an Anti-Spam Expert at Kaspersky. "Attackers are now utilizing Artificial Intelligence (AI) tools to draft phishing emails and automate their processes." To mitigate these risks, Kaspersky recommends deploying dedicated mail server security solutions, leveraging Threat Intelligence Services, and utilizing Automated Security Awareness Platforms to continuously train employees on cyber safety.
//DBTech/CC/MSI//
