UK organizations with sponsor licenses are now targets in a credential-harvesting phishing campaign. This campaign impersonates the UK Home Office and mimics the Sponsor Management System (SMS) login to steal usernames and passwords. Once attackers gain access, they can issue fraudulent Certificates of Sponsorship (CoS), exploit sensitive immigration workflows, or extort compromised users.
First seen on securityboulevard.com
Jump to article: securityboulevard.com/2025/08/u-k-home-office-impersonation-a-protection-playbook-for-sponser-licensed-orgs/
