A recent phishing campaign has come to light, targeting individuals seeking PDF documents online. Researchers from Netskope Threat Labs uncovered this scheme, where cybercriminals lure victims with promises of important files in exchange for credit card information. The fraudsters create a fake PDF file hosted on a trusted content delivery network, leading unsuspecting users to a phishing page disguised as a CAPTCHA image. Upon completion of the CAPTCHA, users are prompted to provide personal and credit card details, which are then used for nefarious purposes like financial fraud. This ongoing campaign, dating back to mid-2024, has impacted numerous Netskope customers and thousands of users. The stolen data is likely used for illicit activities such as malvertising campaigns or purchasing untraceable online gift cards.