The holiday hack – a reminder of why you shouldn’t always trust emails
ID: 309c7fd5-5855-5c62-9bda-79993e886986
STIX ID: report--309c7fd5-5855-5c62-9bda-79993e886986
Feed Name: The Spamhaus Project
Threat Score
### Executive summary The report documents a phishing campaign targeting travelers via lookalike "Thailand Pass" emails that used newly-registered domains to trick victims into downloading a ZIP containing an HTML page which triggered a VBS downloader; the VBS subsequently fetched and executed a Remote Administration Tool (RAT) hosted on archive.org, likely for identity theft and remote access.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.