Islamabad (GNP): Security researchers at Kaspersky have identified an ongoing phishing campaign targeting manufacturing companies across Europe, Asia, and the Middle East. The scheme involves English-language emails posing as inquiries from prospective buyers, ultimately aiming to steal corporate credentials. The campaign, which began in April 2026, remains active.
How the Attack Works
According to Kaspersky, the phishing operation unfolds in several stages. It typically begins with an email from a supposed potential customer asking about product details such as pricing or availability. If the recipient replies, they are then sent a link — either right away or after further back-and-forth — inviting them to download a file containing technical specifications.
Clicking the link leads to a fake webpage designed to resemble a well-known cloud-based PDF service. There, victims are prompted to enter their corporate email address and password under the guise of an “authorization” step meant to prevent unauthorized file access. In reality, this step is designed purely to harvest login credentials.
Expert Commentary
Kaspersky’s Anti-Spam Expert Roman Dedenok noted that spear-phishing attacks are becoming increasingly sophisticated, with attackers shifting from simple one-step scams to elaborate, multi-stage operations designed to boost their success rate. He explained that attackers often conduct detailed research on target organizations to build convincing scenarios — in this case, tailoring their approach specifically to how manufacturing companies typically operate. He added that AI tools are increasingly being used to draft phishing content and automate parts of these campaigns, making it essential for organizations to strengthen both technical defenses and employee awareness around cybersecurity.
Recommended Protections
To guard against this type of threat, Kaspersky recommends organizations deploy dedicated mail security solutions — such as its own Kaspersky Security for Mail Server — to defend against spam, malware delivered via email, phishing attempts, business email compromise, QR code-based attacks, and related threats.
Also read: Japan’s Robotics And Manufacturing Leaders Build On NVIDIA Cosmos
The company also advises equipping security teams with up-to-date threat intelligence on attacker tactics and techniques, and investing in ongoing employee cybersecurity training, such as through structured awareness programs designed to help staff recognize and avoid phishing attempts.
Sohail Majeed is a Special Correspondent at The Diplomatic Insight. He has twelve plus years of experience in journalism & reporting. He covers International Affairs, Diplomacy, UN, Sports, Climate Change, Economy, Technology, and Health.
