Frequency
3
occurrences
First Seen
July 16, 2026
Last Seen
July 21, 2026
Related Threat Clusters
-
Global Phishing Campaign Uses Lua Loader Disguised as TrueType Font Files
Since late March 2026, a large-scale phishing campaign has been observed utilizing disguised TrueType Font (.ttf) files to deliver Lua-based loaders and various malware, including Agent Tesla and Remcos. The attackers…
5 articles · Updated July 16, 2026
Recent Intelligence Reports
- The Ttf Trap A Global Campaign Of A Low Detection Lua Loader — www.fortinet.com · July 21, 2026
- Fake TTF files deliver stealthy malware in global phishing campaign — Csoonline · July 17, 2026
- Phishing Campaign Hides Lua Loader as TrueType Font File — Infosecurity-Magazine · July 16, 2026