GlobalGuard Blog

ChatGPT 'Update Your Payment Details' Scam

GlobalGuard — Tue, 18 Aug 2026 05:43:22 GMT

A new phishing email campaign is impersonating ChatGPT and OpenAI billing. The scam claims that the recipient’s last ChatGPT Plus payment has failed and urges them to “update your payment details”, but instead directs them to a fake Stripe checkout page designed to steal email addresses, credit card details and billing information.

American Express 'Sign-In Alert Phishing Scam

GlobalGuard — Tue, 18 Aug 2026 04:46:50 GMT

GlobalGuard has intercepted a new phishing email campaign impersonating American Express, designed to trick recipients into handing over their credit card account details, card verification data, personal identity information and multi‑factor authentication codes.

Quickbooks Payment Confirmation Phishing Alert

GlobalGuard — Tue, 18 Aug 2026 03:40:43 GMT

GlobalGuard has intercepted a new phishing campaign impersonating Intuit QuickBooks that attempts to steal victims' account credentials by directing them to a fake login page designed to harvest usernames and passwords. Unlike many phishing campaigns that rely solely on deceptive emails, this attack uses a polished HTML email and a staged credential‑capture flow that mimics genuine QuickBooks interfaces. The scam leverages convincing branding, realistic payment details, and urgency cues to trick recipients into entering their login information.

Disney+, Account on Hold Phishing Scam

GlobalGuard — Tue, 18 Aug 2026 02:23:17 GMT

GlobalGuard has intercepted a phishing email campaign impersonating Disney+ to trick recipients into handing over their email credentials and payment card details. The email claims that your Disney+ membership has been placed “on hold” due to incomplete information and urges victims to “update” their account. In reality, clicking the link takes users to a series of fake Disney+ web pages designed to harvest sensitive data..

AT&T Phishing Campaign Exploits Website Redirect Vulnerability

GlobalGuard — Fri, 14 Aug 2026 07:18:30 GMT

GlobalGuard is intercepting a new phishing campaign impersonating telecommunications provider AT&T that attempts to steal victims' personal information and payment card details.

Unlike many phishing campaigns that rely solely on deceptive emails, this attack abuses an open redirect vulnerability on a legitimate website to disguise the malicious destination. This technique can help malicious links evade traditional reputation-based security controls and make them appear more trustworthy to recipients.

Bank of Baroda: Core Systems Secure. Business Still Breached.

GlobalGuard — Fri, 14 Aug 2026 07:04:49 GMT

Bank of Baroda recently confirmed a data leak that originated from a single compromised employee email account. A forensic investigation is underway following reports that a significant volume of customer and internal data was exposed, but the bank has been clear on one point: its core banking systems were not breached.

That distinction is the whole story, and it's worth unpacking for clients who still think of "the breach" as something that happens to servers and databases, not inboxes.

"Microsoft 365 Account Suspension" Scam Steals Business Payment Details

GlobalGuard — Fri, 14 Aug 2026 06:23:15 GMT

GlobalGuard's threat detection network has intercepted a new phishing campaign impersonating Microsoft 365, using a fabricated subscription suspension notice to pressure recipients into handing over their card details on a fake payment page.