Operation TrustTrap: Anatomy of a Large-Scale Deceptive Domain Spoofing Campaign

A massive, highly coordinated phishing campaign dubbed "Operation TrustTrap" is exploiting human trust in government-branded URLs—rather than technical vulnerabilities—by deploying over 16,800 visually deceptive, cloud-hosted spoofed domains across the US, India, and other regions to harvest credentials and payment data, often evading traditional security controls.