CERT-IL Alert: an active phishing campaign in Israel leads to malware
The email was spoofed to be sent from the Israel Post (“Israel Post”) but the sender’s address is support@w3itexperts[.]com.
The email contains a 1.28MB HTML file.
Running the file downloads a malicious ISO file to the workstation.
The malicious email was sent to at least dozens of users.
As of this writing, the HTML file is not recognized at all by the AV engines in VT, so there is a high probability that it may go through email filtering systems.
Featured Resources
Subscribe to Our Blog
Subscribe now to get the latest insights, expert tips and updates on threat exposure validation.
Subscribe