Cybersecurity incident — 2020-01-21 00:00:00
Affected organization: Citibank customers
Affected country: United States of America
Industry: Finance and Insurance
Event type: Exploitive
Event subtype: Exploitation of End Hosts
Motive: Financial
Actor: Undetermined
Actor type: Criminal
Actor country: Undetermined

Researchers discover a new Citibank phishing scam that utilizes a convincing domain name, TLS certs, and even requests OTP codes that could easily trick their victims.