eBanking Phishing Delivered Through IPv4-Mapped IPv6 Address, (Fri, Jun 19th)

Collection of SANS ISC diary items (June 12–19, 2026) highlighting multiple threat observations: an eBanking phishing campaign that uses an IPv4‑mapped IPv6 address format to deliver phishing content (targeting a major Belgian bank), analysis of a malicious ZIP that contains a VHDX which auto-mounts and exposes a malicious JavaScript leading to a Remcos RAT (SHA256 of the reported ZIP: a0104921a2d37ab87482ac9a9f5c3713479c118846c3e999178e75b81620c094), coordinated SSH brute‑force activity telemetry over three months, a guest diary on browser security “blind spots” where protections may be evad­