French banking group Crédit Mutuel Arkéa has confirmed a supply chain cyberattack through a third-party provider, with losses estimated at approximately €118 million.
A sophisticated phishing campaign is using IP-based evasion techniques to serve fake 'suspended account' notices to returning visitors, hiding malicious banking login pages from security researchers.