Security researchers warn about a spike in the use of credential stealers, dubbed StrelaStealer, to target email clients in Poland, Germany, Spain, and Italy.
Best info I could find is from a previous blog post two links beyond the original article. “This updated version of malware delivered via JavaScript comes in archive files as attachments in emails.”
So, don’t open any weird attachments…? That’s what I’m getting from it.
Best info I could find is from a previous blog post two links beyond the original article. “This updated version of malware delivered via JavaScript comes in archive files as attachments in emails.”
So, don’t open any weird attachments…? That’s what I’m getting from it.
It could be using the HTML email renderer. Best to disable HTML view for emails unless its a know good source.
View > Message Body As > Plain text
Could be. Unfortunately, the folks who found this don’t really go into enough detail about the attack’s initial entry point.