Beware of Security Alert-Themed Malicious Emails that Steal Your Email Logins

A GBHackers On Security report warns of a sophisticated phishing campaign that uses security alert-themed emails to steal email logins. The messages are designed to resemble legitimate security notifications from email delivery systems and claim that specific messages have been blocked, prompting recipients to release them manually and act quickly.

Attackers use social engineering by impersonating internal email delivery systems and directing victims to fraudulent webmail login pages that prefill the recipient’s address, boosting the illusion of legitimacy. Clicking the links leads to convincing replica pages of popular webmail platforms, and this domain-trust manipulation makes these emails more credible than typical phishing attempts.

When credentials are entered on the fake pages, the attackers gain access to email accounts and can access confidential business communications and other sensitive information, potentially enabling business email compromise attacks. The piece recommends defence in depth, including multipart filtering, MFA, user education, and verifying alert messages through alternative channels, plus changing passwords and monitoring for unauthorised access if credentials have been entered. The article was written by Mayura Kathir and published on 11 November 2025.