Phishing Campaign Abuses eCards to Deploy RMM Tools
2026-07-15T20:52:20Z•11a2f3aa11622da5b5993164509dba24ac5294c16ae7b6e16f043b7b7deaf48c
Adobe ColdFusionCVEsCVSS-10.0EvilginxMFA-bypassMacOS-malwareMicrosoft Patch TuesdayMicrosoft-Entra-ID-spoofing','SNMP-routers','nation-state-espionMicrosoft-signed-shimsOAuth-spoofingRMMShareFileStorage-Zone-ControllerUEFIcompromised-credentialsdeveloper-id-abuseecardsidentity-based-attackspatchingphishingransomware-entryremote-accesssecure-boot-bypasssupply-chainvulnerability-disclosure
What happened
Infosecurity Magazine roundup (July 2026) covering a surge of high-impact cyber activity: a six-month eCard phishing campaign deploying legitimate RMM tools, discovery of 11 Microsoft-signed UEFI shims that can bypass Secure Boot, and research showing compromised logins (phishing/brute force) are now the top ransomware entry vector. Other notable stories include Microsoft’s record July Patch Tuesday (570 CVEs), an actively exploited Adobe ColdFusion flaw with a CVSS 10.0 rating, Progress/ShareFile Storage Zone Controller disruption over an external security threat, exposed AWS GovCloud keys, a
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- infosecurity_magazine
- Record identifier
- 11a2f3aa11622da5b5993164509dba24ac5294c16ae7b6e16f043b7b7deaf48c
- Enrichment time
- 2026-07-15T20:52:20Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.