New Phantom Stealer Campaign Hits Windows Machines Through ISO Mounting

Cybersecuritynews • December 13, 2025

Share: View original

A sophisticated phishing campaign originating in Russia that deploys the Phantom information-stealing malware via malicious ISO files.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Phantom Stealer Campaign Targets Finance Departments via ISO Files A sophisticated phishing campaign has been identified, originating in Russia, that deploys the Phantom information-stealing malware through malicious ISO files. This operation, named 'Operation MoneyMount-ISO,' specifically targets finance and accounting departments by using fake payment confirmation emails to deceive victims into executing the malware. 2 sources 27

Extracted Entities

Attack Types (2)

Malware Phishing

Campaigns (1)

Phantom Stealer Campaign

Countries (1)

Platforms (2)

Phantom Windows