️ Beware. Phishing attacks via HTML attachments. We continue our security story.
24 Jan 2023, 14:00
⛔️ Beware! Phishing attacks via HTML attachments
We continue our security story! 🔐
📨 Be careful with email newsletters, as attacks using HTML attachments are now one of the most common types of spam.
Phishing campaigns involving the Qakbot malware use Scalable Vector Graphics (SVG) images embedded in HTML email attachments.
The scheme is simple:
🟡They send out emails with an HTML attachment.
🟡When the victim opens the attachment from the email, the JavaScript code inside the SVG image is triggered, creating a malicious ZIP archive.
🟡A dialog box opens to save the file.
🟡The ZIP archive is password protected – it requires the user to enter a password, which is displayed in an HTML attachment, then an ISO image is extracted to launch the Qakbot Trojan.
🚨 Be vigilant and do not download files that open in a dialog box from mailing lists!
➖➖➖➖➖➖➖➖➖➖
✅ Website 👉 Telegram-chat
👉 Twitter 👉 YouTube
👉 Medium 👉 Discord
👉 Reddit Ⓜ️ CMC
#security