eBanking Phishing Delivered Through IPv4-Mapped IPv6 Address, (Fri, Jun 19th)

The ISC SANS diary collection highlights multiple active threats: an eBanking phishing campaign that used an IPv4-mapped IPv6 address to host phishing content (targeting a major Belgian bank), a malicious ZIP (SHA256: a0104921a2d37ab87482ac9a9f5c3713479c118846c3e999178e75b81620c094) containing a VHDX which, when mounted, exposes JavaScript that leads to a Remcos RAT, and additional posts on coordinated SSH brute-force activity, browser-based protection blind spots, and malicious/obfuscated content in MSI/image backgrounds. The items show active phishing and malware delivery techniques that may