eBanking Phishing Delivered Through IPv4-Mapped IPv6 Address, (Fri, Jun 19th)

SANS ISC diaries (mid‑June 2026) highlight multiple active threats: a targeted eBanking phishing campaign that abuses IPv4‑mapped IPv6 addressing to obfuscate phishing infrastructure, a malicious ZIP that mounts a VHDX which drops JavaScript leading to a Remcos RAT infection, and renewed analysis of image/MSI steganography techniques. Other entries cover large‑scale coordinated SSH brute‑force activity and browser blind spots where security tools may not block expected web‑based threats. Practical indicators and delivery/evasion techniques are discussed across the posts.