A sophisticated phishing campaign, dubbed "Diesel Vortex," has been targeting freight and logistics operators in the United States and Europe, stealing sensitive credentials from major companies in the industry. The financially motivated threat group has been operating since September 2025, using 52 domains to deceive victims into handing over their login information.
According to researchers at Have I Been Squatted, a typosquatting monitoring platform, the Diesel Vortex campaign has claimed 1,649 unique credentials from platforms and service providers critical to the freight industry. The list of victims includes prominent companies such as DAT Truckstop, TIMOCOM, Teleroute, Penske Logistics, Girteka, and Electronic Funds Source (EFS).
The researchers discovered the campaign after stumbling upon an exposed repository containing an SQL database from a phishing project that the threat actor called "Global Profit" and marketed to other cybercriminals under the name "MC Profit Always." The repository also included a file with Telegram webhook logs, which revealed communications between the phishing service operators. Based on the language used, the researchers believe that the Diesel Vortex group is likely based in a non-English speaking country.
The Diesel Vortex campaign is a prime example of the increasing threat of phishing attacks in the logistics and freight industry. As the industry becomes more digitalized, the potential for cyber attacks grows, and companies must take proactive measures to protect themselves and their customers.
Phishing attacks like Diesel Vortex often rely on social engineering tactics, where attackers use psychological manipulation to trick victims into divulging sensitive information. In this case, the attackers created fake websites and email addresses that mimic those of legitimate companies, making it difficult for victims to distinguish between genuine and malicious communications.
The consequences of such attacks can be severe, with compromised credentials potentially leading to unauthorized access to sensitive data, financial losses, and reputational damage. As the logistics and freight industry continues to grow, it is essential that companies prioritize cybersecurity and implement robust measures to prevent and respond to phishing attacks.
In light of the Diesel Vortex campaign, freight and logistics operators must remain vigilant and take immediate action to protect themselves. This includes:
- Implementing robust cybersecurity measures, such as multi-factor authentication and email filtering
- Conducting regular security audits and penetration testing
- Educating employees on phishing tactics and best practices for identifying and reporting suspicious activity
- Monitoring for suspicious activity and responding quickly to potential security incidents
The Diesel Vortex campaign serves as a wake-up call for the logistics and freight industry, highlighting the need for increased awareness and proactive measures to prevent phishing attacks. As the threat landscape continues to evolve, companies must stay ahead of the curve to protect their businesses and customers.
Sources:
- Have I Been Squatted: "Diesel Vortex" Phishing Campaign Targets Freight and Logistics Operators
A sophisticated phishing campaign, dubbed "Diesel Vortex," has been targeting freight and logistics operators in the United States and Europe, stealing sensitive credentials from major companies in the industry. The financially motivated threat group has been operating since September 2025, using 52 domains to deceive victims into handing over their login information.
According to researchers at Have I Been Squatted, a typosquatting monitoring platform, the Diesel Vortex campaign has claimed 1,649 unique credentials from platforms and service providers critical to the freight industry. The list of victims includes prominent companies such as DAT Truckstop, TIMOCOM, Teleroute, Penske Logistics, Girteka, and Electronic Funds Source (EFS).
The researchers discovered the campaign after stumbling upon an exposed repository containing an SQL database from a phishing project that the threat actor called "Global Profit" and marketed to other cybercriminals under the name "MC Profit Always." The repository also included a file with Telegram webhook logs, which revealed communications between the phishing service operators. Based on the language used, the researchers believe that the Diesel Vortex group is likely based in a non-English speaking country.
The Diesel Vortex campaign is a prime example of the increasing threat of phishing attacks in the logistics and freight industry. As the industry becomes more digitalized, the potential for cyber attacks grows, and companies must take proactive measures to protect themselves and their customers.
Phishing attacks like Diesel Vortex often rely on social engineering tactics, where attackers use psychological manipulation to trick victims into divulging sensitive information. In this case, the attackers created fake websites and email addresses that mimic those of legitimate companies, making it difficult for victims to distinguish between genuine and malicious communications.
The consequences of such attacks can be severe, with compromised credentials potentially leading to unauthorized access to sensitive data, financial losses, and reputational damage. As the logistics and freight industry continues to grow, it is essential that companies prioritize cybersecurity and implement robust measures to prevent and respond to phishing attacks.
In light of the Diesel Vortex campaign, freight and logistics operators must remain vigilant and take immediate action to protect themselves. This includes:
- Implementing robust cybersecurity measures, such as multi-factor authentication and email filtering
- Conducting regular security audits and penetration testing
- Educating employees on phishing tactics and best practices for identifying and reporting suspicious activity
- Monitoring for suspicious activity and responding quickly to potential security incidents
The Diesel Vortex campaign serves as a wake-up call for the logistics and freight industry, highlighting the need for increased awareness and proactive measures to prevent phishing attacks. As the threat landscape continues to evolve, companies must stay ahead of the curve to protect their businesses and customers.
Sources:
- Have I Been Squatted: "Diesel Vortex" Phishing Campaign Targets Freight and Logistics Operators