Attackers Weaponized Kuse.ai for Stealth Phishing

Trend Micro reported a phishing campaign that hijacked a trusted vendor mailbox to distribute links to fraudulent markdown documents hosted on app.kuse.ai; victims who clicked were redirected to a fake Microsoft login page to harvest corporate credentials, with attackers using evasion techniques (uncommon .md files, domain spoofing, and blurred previews) to bypass detection.