Transport, Logistics Orgs Hit by Stealthy Phishing Gambit

Proofpoint researchers observed a targeted business email compromise campaign (at least 15 compromised accounts) against North American transportation and logistics firms that uses thread‑hijacking and the ClickFix social engineering technique to trick victims into executing malware; payloads observed include infostealers (Lumma, StealC), legitimate remote‑access tooling (NetSupport), and banking/RAT families (DanaBot, Arechclient2/SectopRAT), with attackers impersonating industry platforms to increase legitimacy.