Phishing Campaign Targets European Organizations Using HTML Attachments and Telegram Bots

A sophisticated phishing campaign has been identified in Central and Eastern Europe, targeting various sectors including manufacturing and government. Cybercriminals are using HTML attachments with embedded JavaScript to create convincing login interfaces that impersonate trusted brands, while also utilizing Telegram bots to facilitate credential theft. This operation effectively evades traditional email security measures.