A new phishing campaign is targeting transportation and logistics companies in North America. The phishing attacks are using various information stealers and remote access trojans (RATs). The campaign uses compromised email accounts of transportation and shipping companies, sending phishing emails in existing email conversations. After breaching an email account, the attacker then sends a message with a URL attachment that fetches malware when clicked. 15 breached email accounts have been found thus far. It is not yet clear who is the actor behind these attacks. 

Read more: https://thehackernews.com/2024/09/transportation-companies-hit-by.html