credential-harvesting 1 Incident Investigation Report: GrabThePhisher — Dismantling a DeFi Phishing Kit Apr 8, 2026