Vimeo-Themed Phishing Campaign Targeting Personal and Banking Data

CIS CTI reports an ongoing phishing campaign targeting U.S. State, Local, Tribal, and Territorial (SLTT) entities that impersonates Vimeo to harvest PII and financial data and leverages tax-themed lures to distribute Datto RMM executables; analysts identified numerous related domains, URLs, and file hashes and have shared IOCs via MS-ISAC feeds to block the malicious infrastructure.