Operation Deceptive Prospect: RomCom’s New Social Engineering Playbook

In a malicious campaign dubbed Operation Deceptive Prospect, the RomCom threat group disguised malicious emails as fake customer complaints to trick UK-based services into clicking phishing links. By using realistic personas and impersonating platforms like Google Drive, they aimed to quietly drop malware disguised as documents. Their evolving tactics, clever social engineering, abuse of trusted cloud services, and spoofed domains highlight a growing threat that blends technical skill with human manipulation.