← Back to Feed

Beware of phishing emails disguised as requests to review quotes (PhantomStealer)

August 11, 2026 · AhnLab ASEC · Severity: MEDIUM

AhnLab ASEC uncovered a phishing campaign disguised as quote review requests, impersonating overseas sales teams to deliver PhantomStealer malware under the pretext of revising previous quotes and verifying product versions.

Key Takeaways

  • AhnLab identified a phishing campaign using fake quote review requests to deliver PhantomStealer malware.
  • Attackers impersonated sales team members from overseas companies to trick recipients into opening malicious documents.
  • The emails claimed a previous quote needed revision and asked recipients to verify product versions.
☕ Buy a Coffee