🛍️That “too good to be true” deal could be the lure.

Milk Dragon, also known as NaiLong, has targeted over 6,159 victims across 66 countries since October 2025. With 258 identified phishing pages, the operation impersonates major brands like LEGO, Calvin Klein, and Aeon Malaysia.

Instead of suspicious emails or urgent messages, this phishing operation uses heavily discounted products promoted through Facebook & TikTok marketplaces to lead victims to fake WordPress and WooCommerce e-commerce sites.

Behind the scenes, its custom BytePress plugin can capture payment data in real time, intercept OTPs through Adversary-in-the-Middle techniques, and give operators centralized control over multiple phishing campaigns via a WebSocket connection.

Sold as Phishing-as-a-Service through Telegram starting at 300 USDT per month, Milk Dragon shows how cybercriminals are turning trusted social platforms & familiar shopping experiences into attack infrastructure.

Read more.

#Phishing #CyberSecurity #ThreatIntelligence