This new phishing campaign can tailor its messages to target you with your favorite businesses

• Morphing Meerkat phishing kit can spoof more than 100 different brands
• It’s been used to send “thousands” of emails, experts warn
• Defenses includes adding a strong layer of DNS security

Cybercriminals have created a new technique to serve phishing emails to business users which are almost indistinguishable from legitimate messages.

Cybersecurity researchers Infoblox spotted the Phishing-as-a-Service (PhaaS) kit, built by a threat actor dubbed Morphing Meerkat, which deploys DNS Mail exchange (MX) records, dynamically serving fake login pages.