Netcrook
#Phishing Email
The Fake Badge in Your Inbox: How Official-Looking Emails Can Carry Ransomware
A phishing campaign using Interpol impersonation, formal wording, and legal references shows how trust itself becomes the delivery mechanism for malicious attachments.
ValleyRAT’s New Push Shows How Fake Installers Still Beat Trust
A renewed ValleyRAT wave uses installer lures and Japanese-language email bait to turn ordinary Windows trust decisions into remote-control risk.
Photo ZIPs, Front Desks, and a Scripted Trap Inside Hospitality Networks
A phishing run aimed at hotels in Europe and Asia is using photo-themed ZIP attachments and a Node.js implant, turning ordinary front-desk inboxes into potential entry points.
Tax Lures, Hidden Payloads: Windows Users Are Being Steered Toward Memory-Resident Malware
Tax-branded phishing emails are being used to deliver in-memory malware on Windows, a tactic that shifts detection away from saved files and toward what happens after a user opens the attachment.
GitHub Trust Turned Into a Trap for Developers
A phishing wave used recruiter-style and code-review lures to steer targets toward attacker-controlled repositories, showing how familiar developer workflows can become a malware delivery path.
Operation Dragon Weave Shows How a Single ZIP Can Still Open the Door to Espionage
The campaign tied to Czech Republic and Taiwan targets is a reminder that spear-phishing has not gone away - it has become a delivery system for staged access and commercially available operator tooling.
Invoice Lures and Archive Traps: The Delivery Chain Behind PureLogs
A phishing email, a TXZ attachment, and a JavaScript file form the observed path to a loader linked with the PureLogs infostealer.
Stealth in the Shadows: How Remcos RAT Slips Past Defenses with Fileless Tactics
A new multi-stage malware campaign leverages JavaScript, PowerShell, and process hollowing to evade detection and establish covert control.