United Services Automobile Association

Profile narrative

USAA, also known as the United Services Automobile Association, provides a range of financial products and services to its customers. These offerings include banking solutions such as checking and savings accounts, personal loans, mortgages, and credit cards. In addition, the organization supplies various insurance policies covering automobiles, homes, renters, and life coverage. Investment and retirement planning services are also part of its portfolio, aimed at helping members manage long‑term financial goals.

A distinguishing characteristic of USAA is its primary focus on serving current and former members of the United States military and their families. This specialization shapes its product design, customer support, and community outreach initiatives. The company is structured as a member‑owned association, meaning that policyholders are also its owners. This ownership model aligns the organization’s incentives with the interests of the people it serves.

In late 2025 and early 2026, USAA was identified as a target of Operation DoppelBrand, a financially motivated phishing campaign conducted by the threat actor group GS7. The operation deployed more than 150 look‑alike domains and cloned login portals to harvest employee credentials, transmitting collected data such as IP addresses, geolocation, and device details to attacker‑controlled Telegram bots. Beyond credential theft, the attackers used legitimate remote monitoring tools to maintain persistent access and acted as an initial access broker, selling compromised accounts to affiliates. The campaign’s infrastructure relied on automated domain registration, short‑lived SSL certificates, and Cloudflare hosting, facilitating rapid subdomain creation, and a shared cryptocurrency wallet received approximately 0.28 BTC, indicating illicit financial gain.

USAA’s headquarters is situated within the United States of America, as indicated in the provided information. The organization continues to focus on delivering its core offerings to its defined customer base. Its profile is shaped by the combination of specialized services and the recent experience with a sophisticated phishing campaign. This overview reflects the factual details available about USAA without speculation or added commentary.

Incidents

1 incident linked to this organisation.