Loading malware…
GeorgeGinx is a phishing-as-a-service operation targeting government, banking, healthcare, and information technology organizations in the United States. It abuses legitimate Adobe Shared Links as a trusted redirect layer, concealing phishing destinations within document-sharing workflows and directing victims into Microsoft device-code phishing flows.
The operation abuses legitimate device-code authentication to obtain unauthorized access to corporate accounts without stealing passwords. Its account-compromise mechanism relies on victim-authorized authentication rather than password capture. GeorgeGinx infrastructure includes an attacker-operated administration panel. Activity was observed in October 2026.
6 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.