Researchers Detail Multistage Attack Hijacking Systems with SSLoad, Cobalt Strike

**FROZEN#SHADOW**: Researchers report an active phishing campaign delivering the SSLoad malware (via obfuscated JavaScript and macro-enabled Word documents or booby-trapped contact-form URLs) that fetches an MSI installer to execute payloads and beacon to C2; operators then deploy Cobalt Strike and ScreenConnect to harvest credentials, pivot laterally, and create domain administrator accounts, impacting organizations across Asia, Europe, and the Americas.