Cybercrime, Agent Tesla campaign via fake DHL receipt
The email compressed attachment contains an exe: the malware itself. The data is exfiltrated via smtp.
Cybercrime, Agent Tesla conveyed via fake beneficiary certificate
The email ace attachment of the email contains an exe: the malware itself. The data is exfiltrated via smtp. It is the continuation of the 13 July campaign.
Cybercrime, second Agent Tesla campaign in one day
The zip attachment contains an exe: the malware, which exfilters data via smtp. Host and credentials are the same as that on the purchase order from Dubai.
Cybercrime, Agent Tesla purchase order themed campaign from Dubai
The r0 email attachment contains an exe file: the malware itself. Stolen data is exfiltrated via smtp.
Cybercrime, multi-malware campaign via VelvetSweatshop
Four emails with as many different xlsx attachments contact a single url and download Agent Tesla (two cases), Lokibot and Formbook.
Cybercrime, Agent Tesla goes through a shipment notice
The email zip attachment contains an exe: the malware itself. This exfilters data stolen via smtp.
Cyber Espionage, Snip3 is a new malware exploited to target aerospace and travel sectors
Microsoft cybersecurity experts: It then delivers RevengeRAT or AsyncRAT for data theft, and payloads as Agent Tesla to exfliltrate it.
Cybercrime, an RFQ mail carries an unknown malware
The xlsx file uses an Excel CVE to contact an IP and download the payload. The link is not active now, but downloaded several during the day.
Cybercrime, new Agent Tesla campaign via Spain
The email gz attachment contains an exe. This, if opened, triggers the malware infection. Stolen data is exfiltrated via Telegram.
Cybercrime, fake products order from Australia conveys Agent Tesla
The email zip attachment contains an exe, which triggers the malware infection. This steals the data and exfilters it via SMTP.