Warning: A LinkedIn Phishing Campaign is Targeting Executives

ReliaQuest researchers uncovered a LinkedIn-based phishing campaign targeting executives and IT staff via private messages that lure victims into opening archived attachments which install a legitimate open-source Python pentesting tool; the attackers leveraged common utilities (WinRAR, Python) to lower detection risk and exploit social-media channels as an attack surface.