Pick your Poison - A Double-Edged Email Attack
A sophisticated cyber-attack campaign has been identified, combining phishing techniques targeting Office365 credentials with malware delivery. The attackers use a file deletion reminder as a pretext, exploiting a legitimate file-sharing service to appear more credible. Upon opening a shared PDF file, users are presented with two hyperlinks: 'Preview' leads to a fake Microsoft login page for credential theft, while 'Download' initiates the installation of ConnectWise RAT malware. The malware establishes persistence through system services and registry modifications. This dual-threat approach emphasizes the need for user vigilance and education in recognizing phishing attempts and suspicious emails.
Pulse ID: 680fac69fa21735eedd5b785
Pulse Link: https://otx.alienvault.com/pulse/680fac69fa21735eedd5b785
Pulse Author: AlienVault
Created: 2025-04-28 16:27:21
Be advised, this data is unverified and should be considered preliminary. Always do further verification.
