New Phishing Technique Targets Users via Basic Auth URLs

On October 16, 2025, GBHackers reported a new phishing technique that targets users via Basic Authentication URLs, specifically focusing on GMO Aozora Bank in Japan. This method exploits a legacy web standard where attackers format URLs to visually impersonate trusted domains, deceiving users into clicking malicious links. The report highlights a coordinated phishing campaign with at least 214 unique URLs targeting major global brands, particularly in Japan.

The phishing emails often masquerade as urgent notifications, urging users to complete fake logins. The article emphasizes the need for vigilance in link inspection and improved browser UI cues to combat these deceptive attacks.