⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
A phishing campaign discovered by FortiGuard Labs deploys a JavaScript-driven variant of PureLogs, a malware strain designed to steal sensitive data. Attackers use obfuscated JavaScript embedded in phishing emails to deliver PowerShell scripts, which then employ process hollowing to inject malicious code into legitimate processes.
FortiGuard Labs has uncovered a sophisticated phishing campaign leveraging obfuscated JavaScript, PowerShell, process hollowing, and a PureLogs variant to steal sensitive data. The attackers deploy malicious JavaScript code embedded in phishing emails, which initiates a chain of events leading to the execution of PowerShell scripts.
A phishing campaign leveraging obfuscated JavaScript and PowerShell scripts has been discovered deploying a variant of the PureLogs malware to steal sensitive data. The attack chain begins with a phishing email containing a malicious ZIP archive, which executes JavaScript to download and run PowerShell scripts.
The malware pairs remote access capabilities with ready-made campaign tools, lowering the barrier.
The malware pairs remote access capabilities with ready-made campaign tools, lowering the barrier for full device compromise
The malware pairs remote access capabilities with ready-made campaign tools, lowering the barrier.