CERT-IL Alert: an active phishing campaign in Israel leads to malware
The email was spoofed to be sent from the Israel Post ("Israel Post") but the sender's address is support@w3itexperts[.]com.
The email contains a 1.28MB HTML file.
Running the file downloads a malicious ISO file to the workstation.
The malicious email was sent to at least dozens of users.
As of this writing, the HTML file is not recognized at all by the AV engines in VT, so there is a high probability that it may go through email filtering systems.
Featured Resources
blog
Exploiting BadSuccessor: Cymulate Launches New Advanced Breach Simulation Scenario
At Cymulate, our mission is to stay ahead of evolving threats by transforming cutting-edge research into real-world security testing tools.
blog
11 Email Threats Your Organization Needs to Know
Email remains the primary entry point for cyberattacks. From nation-state actors to low-level cybercriminals, adversaries continually exploit the ubiquity and
blog
Proactive Security in Action: What Real-World Gaps Reveal About Cyber Resilience
Today’s threat actors move fast, and reactive security is no longer enough. Most breaches have a common root cause: a