Agent Tesla BEC Attack Involves Inbox to In-Memory Infostealer

A sophisticated phishing campaign has been identified, utilizing complex multi-stage attacks to bypass traditional security measures. The tactics employed by this operation are ‎Phishing and ‎Social Engineering, indicating a high level of sophistication in the attackers' methods. Specifically, the use of‎ T1566 - Phishing suggests that the attackers have utilized phishing as a primary vector for their attack. Furthermore, the malware payload involved is ‎Agent Tesla, which has been linked to various business email compromise (BEC) attacks. The campaign's indicators of compromise include [IOC HIDDEN • LOGIN REQUIRED] and [IOC HIDDEN • LOGIN REQUIRED], [IOC HIDDEN • LOGIN REQUIRED] [IOC HIDDEN • LOGIN REQUIRED]. This campaign highlights the evolving nature of phishing attacks and their ability to exploit trusted software, cloud identities, and business platforms to achieve their objectives.