Screenshot of the initial email with the malicious attachment.
Traffic from the infection filtered in Wireshark.
he Phantom Stealer infection.
2026-03-23: #PhantomStealer malware sent as an email attachment.
.js file sample from the attachment: bazaar.abuse.ch/sample/8606c...
PowerShell script retrieved by the above .js file: bazaar.abuse.ch/sample/a0d72...
2
1
0
0
