sLoad Malware Delivery Through Phishing Campaigns in Ukraine

Introduction StrikeReady Labs recently reported an ongoing phishing campaign in Ukraine that uses malicious .rar files to deliver the sLoad malware. This malware, hidden within a series of disguised files, employs several reconnaissance techniques to gather information about the infected system and ultimately installs the banking trojan Ramnit . #dailyphish rar -> zip -> lnk -> \\66.63.187[.]150@80\file\GB.vbs -> bitbucket…

Diamond Model