Excerpt
ZeroBEC researchers uncovered a prolonged phishing and malware campaign that uses Indian Income Tax Return (ITR) refund lures to deliver a multi-stage AutoIt infection chain. The campaign targeted financial and technology organizations and successfully evaded multiple leading Secure Email Gateways before ZeroBEC detected and blocked it at the email layer.
The operation is notable for the way it combines credible email delivery, compromised web infrastructure, Dropbox-hosted payloads, password-protected archives, AutoIt staging, sandbox-aware execution, persistence, process injection, and a…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by zerobec.com on zerobec.com.
On the same topics
- Star Blizzard refines phishing and malware delivery with the RedFlick techniqueMicrosoft · Published 29 Sep
- Analysis of a Phishing Email Attack Case by the Larva-24009 Threat ActorAhnLab · Published 2 Aug
- TONResolver RAT Abuses TON Blockchain to Target Japan's Hotel IndustryTrend Micro · Published 29 Jun
