ANY.RUN Unveils Critical Steps for Combating New DHL Phishing Attacks
DUBAI, DUBAI, UNITED ARAB EMIRATES, July 23, 2025 /EINPresswire.com/ -- ANY.RUN, a leading provider of threat analysis and intelligence, has released a detailed case study on phishing attacks exploiting DHL branding. The research uncovers crucial insights into early detection of supply chain attacks and offers practical steps for businesses to identify such threats.
๐๐๐ ๐๐ฉ๐จ๐จ๐๐ข๐ง๐ ๐๐ญ๐ญ๐๐๐ค ๐๐ ๐๐ข๐ง๐ฌ๐ญ ๐๐ง๐๐ซ๐ ๐ฒ ๐๐ง๐๐ฎ๐ฌ๐ญ๐ซ๐ฒ ๐๐ข๐๐ง๐ญ
In an attack investigated by the team at ANY.RUN, threat actors impersonating DHL targeted Meralco, a major utility company in the Philippines, with deceptive emails designed to steal credentials.
โ ๐๐๐ฅ๐ข๐๐ข๐จ๐ฎ๐ฌ ๐๐ญ๐ญ๐๐๐ก๐ฆ๐๐ง๐ญ ๐๐๐๐ญ๐ข๐๐ฌ: The email contained a file posing as a shipping invoice. When opened, it displayed a fake DHL-styled login page, prompting the user to enter credentials.
โ ๐๐ซ๐๐๐๐ง๐ญ๐ข๐๐ฅ ๐๐ฑ๐๐ข๐ฅ๐ญ๐ซ๐๐ญ๐ข๐จ๐ง ๐ฏ๐ข๐ ๐๐ก๐ข๐ซ๐-๐๐๐ซ๐ญ๐ฒ ๐๐๐ซ๐ฏ๐ข๐๐: The login form sent entered data to a legitimate online form handler abused to collect stolen credentials.
โ ๐๐๐ฎ๐ฌ๐๐ ๐๐ง๐๐ซ๐๐ฌ๐ญ๐ซ๐ฎ๐๐ญ๐ฎ๐ซ๐ ๐๐๐ซ๐จ๐ฌ๐ฌ ๐๐๐ฆ๐ฉ๐๐ข๐ ๐ง๐ฌ: Historical analysis found over 200 phishing samples leveraging the form handling service.
This case study highlights the technical methods used in modern supply chain phishing campaigns, from impersonation and infrastructure abuse to payload delivery and credential capture, and offers valuable indicators of compromise (IOCs) for defenders.
Read the full article on ANY.RUNโs blog.
๐๐จ๐ฐ ๐๐ฎ๐ฌ๐ข๐ง๐๐ฌ๐ฌ ๐๐ฌ๐ ๐๐๐.๐๐๐ ๐ญ๐จ ๐๐๐ญ๐๐๐ญ ๐๐ฎ๐ฉ๐ฉ๐ฅ๐ฒ ๐๐ก๐๐ข๐ง ๐๐ญ๐ญ๐๐๐ค๐ฌ ๐๐๐ซ๐ฅ๐ฒ
Businesses utilizing ANY.RUN's solutions gain a significant edge in identifying and mitigating supply chain attacks, ensuring robust defense against cyber threats.
By safely interacting with suspicious emails, files, and URLs in a controlled sandbox environment, businesses can instantly identify and understand malware and phishing, ensuring they donโt spread further.
With access to TI Lookupโs searchable database of recent threats, businesses can swiftly verify if artifacts in alerts are linked to specific attacks, enabling rapid response and strengthened security measures.
๐๐๐จ๐ฎ๐ญ ๐๐๐.๐๐๐
ANY.RUN is an interactive malware analysis and threat intelligence provider trusted by SOCs, CERTs, MSSPs, and cybersecurity researchers. The companyโs solutions are leveraged by 15,000 corporate security teams for incident investigations worldwide.
With real-time visibility into malware behavior, a focus on real-time interaction and actionable intelligence, ANY.RUN accelerates incident response, supports in-depth research, and helps defenders stay ahead of evolving threats.
The ANY.RUN team
ANYRUN FZCO
+1 657-366-5050
email us here
Visit us on social media:
LinkedIn
YouTube
X
1 https://any.run/?utm_source=ein&utm_medium=pressrelease&utm_campaign=dhl-phishing&utm_content=landing&utm_term=230725
2 https://any.run/cybersecurity-blog/supply-chain-attacks-analysis/?utm_source=ein&utm_medium=pressrelease&utm_campaign=dhl-phishing&utm_content=blog&utm_term=230725
