Taiwan Hit by Sophisticated Phishing Campaign

FortiGuard Labs observed a January 2025 phishing campaign impersonating Taiwan's National Taxation Bureau that uses password-protected ZIPs and multi-stage payloads (Winos 4.0, HoldingHands RAT, and others) with DLL side-loading and filename-encoded API calls to evade detection and maintain persistent access; defenders are advised to strengthen layered email security, user training, and real-time threat intelligence.