Phishing Council warns of fraudulent emails exploiting leaked ISP credentials

Phishing emails are circulating, potentially exploiting leaked ISP credentials. The Phishing Council warns users to be vigilant. The Phishing Council issued a warning on June 26, 2026, about phishing emails that appear to use leaked authentication information from domestic Internet Service Providers. This follows a KDDI announcement on June 23, 2026, regarding a potential leak of information from an ISP it provides systems for. The phishing emails have subject lines like "Important: VISA card usage restrictions" and "Amazon.co.jp: Payment method confirmation required." The Phishing Council urges affected users to change passwords immediately and access services directly through bookmarks, not email links.