PSA: Wordfence Brand Being Actively Used in Phishing Campaigns

Earlier this week we became aware that malicious actors are using Wordfence brand image to run a phishing scam on WordPress and Wordfence users, posing as unknown login notifications from their own website while linking to a fake login page, clearly aiming to steal WordPress login credentials.

If you have received a suspicious email like this you may want to ensure it is legitimate by checking a couple of telltale signs:

• Wordfence notifications from your website will be sent from …

aware brand campaigns credentials fake image login login credentials malicious malicious actors notifications own page phishing phishing scam psa run scam steal website week wordfence wordpress