According to a Kaspersky report, threat-actors are exploiting registration, subscription, and feedback forms on websites to insert spam content or phishing links into confirmation emails from respected and trustworthy companies on a global scale.
Source: ITP.net
Full Article: Scammers spam and phish emails from official sites
