Foundation Traces Passport Phishing Emails to Compromised Cloudflare API Keys

WHY IT MATTERS

Phishing is when someone pretends to be a trusted company or person to trick you into giving up sensitive information, like passwords or crypto wallet keys. Think of it like receiving a fake letter that looks exactly like it came from your bank, asking you to confirm your account details. In this case, attackers got hold of special digital credentials called API keys, which are like master passwords that let software systems talk to each other. By abusing these keys, the attackers were able to send emails that looked real, making the scam harder to spot. This is a reminder that even emails from seemingly legitimate sources can be fraudulent, and users should always verify requests for sensitive information through official channels.