{"success":true,"data":{"id":"fake-1password-family-invite-credential-phish","label":"Fake 1Password family/teams invitation phishing — impersonates 1Password with a family-invite or team-join lure directing to a fake portal harvesting master passwords + secret keys. Proofpoint / KrebsOnSecurity 2025-2026.","description":"Phishing emails impersonating 1Password with a fake family or teams invitation that directs victims to a lookalike \"accept invite\" page harvesting master passwords and secret keys — enabling total account takeover across all stored credentials. Three-part detection: (1) 1Password family / teams / business / vault invitation language, (2) pending-invitation or invite-expires urgency, (3) accept / join / master-password-entry CTA with off-1password.com link. Proofpoint and KrebsOnSecurity 2025-2026 documented 1Password impersonation campaigns; active campaigns confirmed targeting tech employees and families. Score +5: full 1Password credential compromise enables cascading takeover of all stored accounts — one of the highest-impact credential phishing targets.","tier":"danger","category":"phishing","isThin":false}}