New phishing campaign targeting Japanese online banking users uses 'PayPoy' domain/branding typo
Source Reddit Cybersecurity
Discussion
A new phishing campaign targets Japanese online banking users by impersonating a legitimate bank with a typographical error in the brand name, using 'PayPoy' instead of the correct name. The phishing emails demand verification within 24 hours but contain a conspicuous branding typo that has reduced the campaign's perceived credibility, turning it into a viral meme in the local tech community rather than causing widespread alarm. The campaign was reported on Reddit cybersecurity forums with minimal discussion and no confirmed exploits in the wild. No patch or official remediation is applicable as this is a phishing campaign rather than a software vulnerability.
r/cybersecurity (opens in a new tab)u/Infamous-Office96980 points0 comments
We have observed a recent phishing campaign targeting Japanese online banking users that demonstrates an ironic lack of quality control.
While the threat actors managed to spell the brand name correctly once within the body text, the primary headers explicitly read "PayPoy Bank" and "PayPoy Points."
Note on Visual Proof:
Since this subreddit does not allow direct image uploads, I have posted the verified, Exif-cleared screenshot over at r/japannews for reference. You can view the actual phishing mail interface and the hilarious "PayPoy" branding layout here:
https://www.reddit.com/r/japannews/comments/1tpbtng/a_suspicious_paypoy_bank_phishing_email_is/
Interestingly, the phishing email demands verification within 24 hours, yet the sheer absurdity of the typo has turned the incident into a viral meme among the local tech community rather than a security panic. Has anyone else detected this specific string pattern or domain variant in recent SOC logs?