Threat Actors Exploit Multimedia Systems for Covert Vishing Attacks

**Executive Summary:** Threat actors are increasingly embedding vishing instructions in multimedia attachments (MP4 and WebP) sent via phishing emails to bypass traditional email filters and coerce recipients into calling fraudulent numbers; the report outlines the attack flow, provides multiple IoCs (file names and SHA256 hashes), and recommends improving detection of unconventional attachment formats and user education.