The NJCCIC observed a new adversary-in-the-middle (AiTM) phishing campaign aimed at harvesting credentials. This campaign starts with an email claiming to be from the help desk, with a link provided to reset or retain the current password. Upon clicking the provided link, users are directed to a Loveable.app math-based CAPTCHA, which helps threat actors bypass [...]