Trend Micro said it discovered the campaign by monitoring the creation of rogue, lookalike websites often used by hackers to trick victims into giving up their passwords. The Tokyo-based firm recently detected four Macron-themed fake domains being set up on digital infrastructure used by a group it calls Pawn Storm, according to Trend Micro researcher Feike Hacquebord.