Voicemail Phishing Continues to Target Key US Industries

Since May 2022, ThreatLabz has tracked an active voicemail-themed phishing campaign targeting US organizations (including military, security vendors, healthcare, and manufacturing supply-chain) that uses malicious HTML attachments to redirect victims through a redirector and a CAPTCHA-protected stage to an Office365 credential phishing page; the report includes attack-chain technical analysis, sample headers and JavaScript deobfuscation, IoCs (malicious domains and an attachment MD5), and Zscaler detection details and mitigations.