Agent Tesla and Taskun Malware Targeting US Education and Govt Entities

Veriti researchers report an active phishing-driven campaign targeting US education and government entities that delivers Agent Tesla (credential-stealing infostealer) alongside Taskun (backdoor/persistence) via malicious Microsoft Office attachments; the combo enables credential theft, system persistence, and prolonged access. The report recommends prompt patching, user awareness training, and multi-layered defenses to mitigate data-exfiltration risks.