News and Analysis

Malware operators are tricking targets through the threat of a copyright infringement claim. Cisco Talos researchers discovered an ongoing attack in Taiwan sending phishing emails that appear as a legal notice from a copyright holder, containing a malware attachment pretending to be a legal document related to the claim. The attachment then reroutes victims to a Dropbox domain that infects them with an info-stealing malware designed to harvest credentials and personal details. The malware was identified as LummaC2 or Rhadamanthys, available on dark web markets.