A new phishing campaign was uncovered in which attackers store malware on public services such as Amazon Web Services and GitHub and then use email to launch an attack campaign and gain control of the newly infected systems. FortiGuard Labs said the email lures victims into loading-up a malicious, high-severity Java downloader that aims to spread a new VCURMS remote access trojan (RAT) and a well-known STRRAT RAT.

Source: SC Magazine