HP Exposes Low-Effort, High-Impact Cat-Phishing Targeting Users

HP's Q1 2024 Wolf Security Threat Insights highlights a rise in 'cat-phishing' campaigns that abuse open redirects, Windows BITS, and HTML smuggling to deliver malware (including AsyncRAT and the Ursnif banking trojan) via low-effort lures like fake invoices; the report notes roughly 12% of email threats evaded detection, a shift from macros to exploits in document-based attacks, and recommends defence-in-depth and AI-enhanced detection and containment.