Threat actors have launched a new phishing campaign targeting Spanish-speaking individuals with an updated Agent Tesla malware variant, Hackread reports. Attacks begin with the distribution of a fraudulent Spanish-language SWIFT transfer notification email containing an Excel file in OLE format abusing the CVE-2017-0199 flaw, which when opened triggers an OLE hyperlink as it downloads an RTF file, a report from Fortinet’s FortiGuard Labs revealed.
Source: SC Magazine