While security analysts identified that threat actors were found using HTML Smuggling. Since December 2022, this campaign has been ongoing and is probably a direct extension of a previously disclosed RedDelta campaign.

Source: GBHackers