New Brazilian-Linked SambaSpy Malware Targets Italian Users via Phishing Emails
Through a phishing effort, a previously unreported malware known as SambaSpy is targeting victims only in Italy. The threat actor behind the campaign is thought to be Brazilian Portuguese-speaking.
According to a recent investigation by Kaspersky, threat actors often attempt to maximize their income by casting a wide net, but these attackers are concentrated on a single nation. Before extending their operation to other nations, it's probable that the attackers are testing the waters with Italian users.
A phishing email that either contains an HTML attachment or an embedded link that starts the infection process is where the assault begins. If the HTML attachment is opened, the multifunctional RAT payload is deployed and launched using a ZIP archive that contains a temporary download...
