Agent Tesla

TTF Trap Campaign Hides a Low-Detection Lua Loader Inside Fake TrueType Font Files

• Malware

TTF Trap Campaign Hides a Low-Detection Lua Loader Inside Fake TrueType Font Files

Do Son July 22, 2026 0

A global phishing campaign hides a low-detection Lua loader inside fake .ttf font files to drop Remcos, XWorm, Agent Tesla, and a Snake Keylogger.

Inside the Stealthy Agent Tesla Infection Chain

• Malware

Inside the Stealthy Agent Tesla Infection Chain

Do Son June 16, 2026 0

Discover how a simple phishing email triggers a complex Agent Tesla infection chain, using process injection and in-memory loading to steal sensitive data.

DiCaprio Movie Torrent Lures Users: Agent Tesla Deployed via Malicious LNK and Subtitle File Code Hiding

• Malware

DiCaprio Movie Torrent Lures Users: Agent Tesla Deployed via Malicious LNK and Subtitle File Code Hiding

Do Son December 12, 2025 0

A movie torrent scam uses a DiCaprio film lure to infect PCs with Agent Tesla RAT. The attack chain uses LNK files and malicious code hidden in a subtitle file to achieve fileless execution via LotL tools.

Stealth in Pixels: .NET Malware Hides Payloads in Bitmap Resources

• Malware

Stealth in Pixels: .NET Malware Hides Payloads in Bitmap Resources

Do Son May 13, 2025 0

Sophisticated malware hides inside image files within .NET apps to secretly infect systems, targeting finance in Türkiye and logistics in Asia.

Sophisticated Phishing Campaign Uses Multi-Layered Tactics to Deliver Malware

• Cybercriminals

Sophisticated Phishing Campaign Uses Multi-Layered Tactics to Deliver Malware

Do Son April 18, 2025 0

Unit 42 uncovers a sophisticated phishing campaign using multi-layered tactics to deliver malware like Agent Tesla, evading detection.

Steganographic Campaign Distributes Multiple Malware Variants, Including Remcos and AsyncRAT

• Malware

Steganographic Campaign Distributes Multiple Malware Variants, Including Remcos and AsyncRAT

Do Son March 19, 2025 0

Uncover the ongoing steganographic campaign that distributes malware like Remcos RAT. Learn how it operates.

ModiLoader Takes Over: Phishing Frenzy Targets Poland

• Cyber Security
• Malware

ModiLoader Takes Over: Phishing Frenzy Targets Poland

Do Son August 1, 2024 0

Stay informed about the latest phishing campaigns targeting businesses in Poland, Italy, and Romania. Learn how the ModiLoader Trojan is used to deliver malicious software.

Cybercrime Actors Behind Agent Tesla Campaigns Unmasked

• Cyber Security
• Malware

Cybercrime Actors Behind Agent Tesla Campaigns Unmasked

Do Son April 2, 2024 0

Check Point Research has lifted the veil of anonymity surrounding two cybercrime actors responsible for recent Agent Tesla malware campaigns

SVG Files: The Emerging Vector of Cyber Threats

• Cyber Security
• Malware

SVG Files: The Emerging Vector of Cyber Threats

Do Son March 17, 2024 0

AutoSmuggle represents a pivotal development in the malware delivery arena. By embedding executable or archive files within SVG or HTML files

Malware Hiding in PDFs: What You Need to Know

• Malware

Malware Hiding in PDFs: What You Need to Know

Do Son March 1, 2024 0

From initial access via deceptive PDFs to the execution of obfuscated JavaScript files, the process is meticulously crafted to evade detection

Booking.com Impersonation Campaign: Agent Tesla Malware Analysis

• Malware

Booking.com Impersonation Campaign: Agent Tesla Malware Analysis

Do Son February 26, 2024 0

Forcepoint has uncovered a sophisticated malware campaign exploiting Booking.com's brand reputation to deliver Agent Tesla malware

Old Vulnerabilities, New Attacks: Encrypted MalDocs Evade Detection

• Malware
• Vulnerability

Old Vulnerabilities, New Attacks: Encrypted MalDocs Evade Detection

Do Son February 9, 2024 0

MalDocs leveraging old CVEs often evade detection due to their sophisticated evasion techniques. These techniques include encryption

G Data Uncovers Stealthy Malware: Agent Tesla Targets Sensitive Data in Email and Browsers

• Malware

G Data Uncovers Stealthy Malware: Agent Tesla Targets Sensitive Data in Email and Browsers

Do Son November 22, 2023 0

G Data has uncovered a novel variant of the malicious software Agent Tesla, delivered via a bait file in the ZPAQ compression format