A React-based phishing page with credential exfiltration via EmailJS, (Fri, Mar 13th)
2026-03-13T19:23:48Z•9764a57e0e6af9c2f8d4ee0a06c5404cc3c7b963785caaafa939ab0057b68abb
CVE-2026-0866chromiumcredential-theftemailjsexfiltrationmalicious-webpagemicrosoft-edgemicrosoft-patch-tuesdayphishingreactjssecurity-advisoryvulnerability-disclosurezombie-zip
What happened
SANS ISC reports a React-built phishing page that dynamically constructs the lure and abuses a legitimate EmailJS service to exfiltrate credentials. The phishing email itself was low-quality but the credential collection technique (using a real email service) is notable. The feed also highlights Microsoft Patch Tuesday (March 2026) addressing 93 vulnerabilities including 8 rated critical and multiple Chromium issues affecting Edge, and calls out a newly published vulnerability, Zombie Zip (CVE-2026-0866).
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- 9764a57e0e6af9c2f8d4ee0a06c5404cc3c7b963785caaafa939ab0057b68abb
- Enrichment time
- 2026-03-13T19:23:48Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.