MEDIUMPhishing
Global

Phishing Campaign Hides Lua Loader as TrueType Font File

·Source: Infosecurity Magazine

Updated:

Executive Summary

Global phishing campaign disguised a Lua loader as a font file to deploy RATs and infostealers

Analysis

Global phishing campaign disguised a Lua loader as a font file to deploy RATs and infostealers
Source Attribution

Originally published by Infosecurity Magazine on Jul 16, 2026.

Related Threats

MEDIUMPhishing

Operation BlueDash Deploys Level RMM and ScreenConnect via Fake Teams Update

Cybersecurity researchers have flagged a Microsoft Teams-themed phishing campaign that employs "secure document" lures to deliver legitimate remote monitoring and management (RMM) tools. "The victim was directed through compromised web infrastructure to a counterfeit Microsoft Store page claiming that Microsoft Teams had to be updated before the shared document could be opened," ZeroBEC said in

The Hacker News
LOWPhishing

CTM360 Research Reveals How Insurance Phishing Has Evolved Into Real-Time Account Hijacking

For years, phishing campaigns targeting financial institutions followed the same playbook. Victims were tricked into entering usernames and passwords, attackers collected the credentials, and accounts were compromised later when an opportunity arose. That model is changing. Recent investigations into insurance-focused phishing operations reveal a more immediate approach. Instead of harvesting

The Hacker News
MEDIUMPhishing

IL: Weeks after cyberattack, ETHS students receive phishing scam emails

Bob Chiarito reports: Six weeks after a cyberattack shut down the campus for two days, several Evanston Township High School students received phishing emails this week. The emails offered students part-time jobs paying $550 for two to three hours of work, three times a week and came from a student’s ETHS email account. The emails were signed by “Human Resource”... Source

DataBreaches.net