Credential phishing attack targeted 16,000 emails at nonprofit agency

Fraudulent American Express email bypassed Google Workspace security and directed users to spoofed page to enter credentials, Amorblox researchers reported.

agency attack credential credential phishing cybercrime emails email security nonprofit phishing phishing attack social engineering