CERT-AGID analyzed 182 campaigns affecting Italy during September 19–25 and shared 1,411 IoCs with accredited organizations. Phishing, malware delivery, and credential and payment-data theft featured prominently.
CERT-AGID analyzed a fake Italian National Health Service site that serves StreamRat to Android devices and an obfuscated PowerShell loader leading to XWorm on Windows. StreamRat can receive targets and HTML overlays dynamically from its server.
CERT-AGID reports a campaign using compromised certified email accounts to send fake invoice reminders with ZIP attachments. The files launch a chain leading to MintsLoader and potentially RATs or stealers.