A review of samples of this phishing campaign shows that the attackers concentrated their attacks on individuals’ online accounts, especially personal emails (Gmail, Yahoo. and Outlook) and business emails (organization and university emails). After accessing the credential details of the accounts, they steal sensitive data from their victims