Phishing Campaign Targets Executives With Phony Awards

A targeted phishing campaign impersonates an executive recognition program (‘Cartier Recognition Program’) and delivers a password-protected ZIP that opens an HTML login page to harvest credentials; a follow-on fake error page uses the ClickFix social-engineering trick to get victims to run a PowerShell command that downloads and installs the Stealerium information-stealer.