[Heads-Up] Phishing Campaign Delivers VCURMS RAT

Fortinet researchers uncovered a phishing campaign that delivers a malicious Java downloader hosted on public services (AWS/GitHub) which installs a new VCURMS RAT and STRRAT; the malware suite steals browser data, credentials, and includes a keylogger and modified stealer while using obfuscation and email-based command-and-control.