Another day, another malicious JPEG, (Mon, Feb 23rd)

This report analyzes a phishing-driven malware campaign where a large obfuscated JScript attachment (first stage) used Base64 and string obfuscation to spawn a hidden PowerShell process, download a PNG/JPEG containing a Base64-encoded payload, and ultimately retrieve a Remcos RAT binary; the author provides analysis steps, TTPs, and IoCs including URLs and file hashes.