← Incidents
INCIDENT 143PhishingLOW / UNDER REVIEWSourced
Dissecting the JWR phishing framework
Cisco Talos recently identified an undocumented phishing framework, internally branded "JWR" by its developer, built to convincingly impersonate checkout and login pages across major payment and shopping platforms.
Last evidence update
13 AUG 2026 · 10:00 UTC
Source count
1
Status
reported
Finance
Preceded by
Weak signals the observatory recorded before this incident became visible.
Observation history
How this record has evolved as evidence accumulated.
18 AUG · 18:23 UTC
Initial report
Evidence