Fake Secure Mail Delivers Malware Posing as Credit Card Notice
Source: Socprime
Published:
<p>AhnLab uncovered a phishing campaign that delivers malicious LNK files disguised as secure mail notifications from a major Korean credit card provider. When opened, the shortcut launches an HTA through mshta.exe and PowerShell, then downloads follow-on payloads that change depending on whether Wi