On October 8, 2026, The Hacker News reported Phishing, Attackers, ANY.RUN. The framing is mine. Their sentences stay on their page.
The names I am willing to repeat are Phishing, Attackers, ANY.RUN, Wazza. The subject words I am keeping are phishing, credentials.
I follow the money path. The nickname of the crew is the least useful line.
Source I used: The Hacker News. The link is under this column.