{"id":50393,"date":"2023-02-03T11:05:00","date_gmt":"2023-02-03T11:05:00","guid":{"rendered":"http:\/\/5f650dee-4117-4a3d-88d6-4915d8c33464"},"modified":"2023-02-03T11:05:00","modified_gmt":"2023-02-03T11:05:00","slug":"hackers-are-using-this-new-trick-to-deliver-their-phishing-attacks","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/hackers-are-using-this-new-trick-to-deliver-their-phishing-attacks\/","title":{"rendered":"Hackers are using this new trick to deliver their phishing attacks"},"content":{"rendered":"<figure class=\"c-shortcodeImage u-clearfix c-shortcodeImage-large\">\n<div class=\"c-shortcodeImage_imageContainer\">\n<div class=\"c-shortcodeImage_image\"><picture class=\"c-cmsImage c-cmsImage_loaded\"><source media=\"(max-width: 767px)\" srcset=\"https:\/\/www.zdnet.com\/a\/img\/resize\/68a42a315e99ef36cd31dbe2a5a9913752490064\/2023\/02\/02\/66779517-7e91-4bea-a8e3-c57b133b7cca\/a-woman-looking-at-her-laptop-with-concern-while-working-from-home.jpg?auto=webp&amp;width=768\" alt=\"a-woman-looking-at-her-laptop-with-concern-while-working-from-home\"><source media=\"(max-width: 1023px)\" srcset=\"https:\/\/www.zdnet.com\/a\/img\/resize\/7ccb6256b39bee570d640f2f4bfc7f5259cc49f1\/2023\/02\/02\/66779517-7e91-4bea-a8e3-c57b133b7cca\/a-woman-looking-at-her-laptop-with-concern-while-working-from-home.jpg?auto=webp&amp;width=1024\" alt=\"a-woman-looking-at-her-laptop-with-concern-while-working-from-home\"><source media=\"(max-width: 1440px)\" srcset=\"https:\/\/www.zdnet.com\/a\/img\/resize\/fa968510adf2df16800d96245a32e1d1e74424e8\/2023\/02\/02\/66779517-7e91-4bea-a8e3-c57b133b7cca\/a-woman-looking-at-her-laptop-with-concern-while-working-from-home.jpg?auto=webp&amp;width=1280\" alt=\"a-woman-looking-at-her-laptop-with-concern-while-working-from-home\"><img decoding=\"async\" src=\"https:\/\/www.zdnet.com\/a\/img\/resize\/fa968510adf2df16800d96245a32e1d1e74424e8\/2023\/02\/02\/66779517-7e91-4bea-a8e3-c57b133b7cca\/a-woman-looking-at-her-laptop-with-concern-while-working-from-home.jpg?auto=webp&amp;width=1280\" alt=\"a-woman-looking-at-her-laptop-with-concern-while-working-from-home\" width=\"1280\" height=\"853.3333333333333\" fetchpriority=\"low\"><\/picture><\/div>\n<p> <!----><\/div>\n<p> <!----><figcaption> <span class=\"c-shortcodeImage_credit g-outer-spacing-top-xsmall u-block\">Image: Getty \/ Lucy Lambriex<\/span><\/figcaption><\/figure>\n<p>Cyber criminals are using uniquely crafted <a href=\"https:\/\/www.zdnet.com\/article\/what-is-phishing-how-to-protect-yourself-from-scam-emails-and-more\/\" rel=\"follow\">phishing emails<\/a> to infect victims with malware &#8212; and they&#8217;re doing so by experimenting with a new method of delivering the malicious payload.&nbsp;<\/p>\n<p>According to <a href=\"https:\/\/www.proofpoint.com\/us\/blog\/threat-insight\/onenote-documents-increasingly-used-to-deliver-malware\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">analysis by Proofpoint<\/a>, there&#8217;s been a rise in cyberattackers attempting to deliver <a href=\"https:\/\/www.zdnet.com\/article\/what-is-malware-everything-you-need-to-know-about-viruses-trojans-and-malicious-software\/\" rel=\"follow\">malware<\/a> using OneNote documents, a digital notebook signified by .one extensions that is part of the <a href=\"https:\/\/www.zdnet.com\/article\/what-is-microsoft-365-formerly-office-365-everything-you-need-to-know\/\" rel=\"follow\">Microsoft 365 office applications suite<\/a>.&nbsp;<\/p>\n<p><strong>Also:&nbsp;<\/strong><a href=\"https:\/\/www.zdnet.com\/article\/what-is-phishing-how-to-protect-yourself-from-scam-emails-and-more\/\" rel=\"follow\"><strong>What is phishing? Everything you need to know to protect against scam emails &#8211; and worse<\/strong><\/a><\/p>\n<p>Cybersecurity researchers note that it&#8217;s unusual for OneNote documents to be abused in this way and there&#8217;s one simple reason why attackers are experimenting with them &#8212; because they can more easily bypass threat detection than other attachments. And it appears to be working.&nbsp;<\/p>\n<p>&#8220;Based on data in open-source malware repositories, initially observed attachments were not detected as malicious by multiple anti-virus engines, thus it is likely initial campaigns had a high efficacy rate if the email was not blocked,&#8221; Proofpoint told ZDNET.<\/p>\n<p>&#8220;Since <a href=\"https:\/\/www.zdnet.com\/article\/microsoft-brings-back-vba-macro-block-in-office\/\" rel=\"follow\">Microsoft began blocking macros<\/a> by default in 2022, threat actors have experimented with many new tactics, techniques, and procedures (TTPs), including use of previously infrequently observed filetypes such as virtual hard disk (VHD), compiled HTML (CHM), and now OneNote (.one).&#8221;&nbsp;<\/p>\n<p>The <a href=\"https:\/\/www.zdnet.com\/article\/what-is-phishing-how-to-protect-yourself-from-scam-emails-and-more\/\" rel=\"follow\">phishing emails<\/a>, first sent during December 2022, with the number rising significantly in January 2023, are attempting to deliver one of several different malware payloads, including <a href=\"https:\/\/www.zdnet.com\/article\/microsoft-warns-watch-out-for-this-new-malware-that-steals-passwords-webcam-and-browser-data\/\" rel=\"follow\">AsyncRAT<\/a>, <a href=\"https:\/\/www.zdnet.com\/article\/this-phishing-campaign-delivers-malware-that-steals-your-passwords-and-chat-logs\/\" rel=\"follow\">Redline<\/a>, <a href=\"https:\/\/www.zdnet.com\/article\/agent-tesla-ramps-up-its-game-in-bypassing-security-walls-attacks-endpoint-protection\/\" rel=\"follow\">AgentTesla<\/a>, and <a href=\"https:\/\/www.zdnet.com\/article\/researchers-find-three-new-malware-families-used-in-global-finance-phishing-campaign\/\" rel=\"follow\">Doubleback<\/a>, all of which are designed to steal sensitive information from victims, including usernames and passwords.&nbsp;<\/p>\n<p>Proofpoint researchers also note that a cyber-criminal group they track as TA577 has also started to leverage OneNote in campaigns to deliver <a href=\"https:\/\/www.zdnet.com\/article\/this-malware-is-reading-your-email-30-minutes-after-the-first-infection\/\" rel=\"follow\">Qbot<\/a>. Rather than stealing information to use themselves, TA577 acts as an initial access broker, selling stolen usernames and passwords onto other cyber criminals, <a href=\"https:\/\/www.zdnet.com\/article\/ransomware-why-its-still-a-big-threat-and-where-the-gangs-are-going-next\/\" rel=\"follow\">including ransomware gangs<\/a>.&nbsp;<\/p>\n<p>Over 60 of these campaigns have been detected so far and they all share similar characteristics, with emails and file attachments linked to themes including invoices, remittances, shipping, and seasonal themes, such as information on a Christmas bonus, among others.&nbsp;<\/p>\n<p>For example, a phishing message sent out to targets in the manufacturing and industrial sectors included attachment names related to machine parts and specifications, indicating a high level of research was put into crafting the lure.&nbsp;<\/p>\n<p>Other OneNote campaigns are slightly more generic and sent out to thousands of potential victims at once. One of these campaigns targeted the education sector with false invoices, while another was more widely spread, claiming to offer a Christmas gift or bonus to thousands of potential victims.&nbsp;<\/p>\n<p>In each case, the phishing attack relies on the victim opening the email, opening the OneNote attachment, and clicking on malicious links. While OneNote does offer a warning message about suspicious links, users who&#8217;ve been sent a specifically crafted email to appeal directly to them &#8212; or think they might be getting a bonus &#8212; could attempt to bypass this warning. &nbsp;<\/p>\n<p>Researchers warn that it&#8217;s likely these campaigns have a high rate of success if the emails aren&#8217;t blocked &#8212; and that more cyber-threat groups are likely to adopt this technique to successfully deliver phishing and malware campaigns.&nbsp;<\/p>\n<p>&#8220;Proofpoint has increasingly observed OneNote attachments being used to deliver malware. Based on our research, we believe multiple threat actors are using OneNote attachments in an attempt to bypass threat detections,&#8221; said researchers, who warn that this is &#8220;concerning&#8221; because, as demonstrated by TA577, <a href=\"https:\/\/www.zdnet.com\/article\/theres-been-a-big-jump-in-crooks-selling-access-to-hacked-networks-ransomware-gangs-are-their-best-customers\/\" rel=\"follow\">this tactic can become an initial entry point for distributing ransomware<\/a>, which could cripple a whole organization and network.<\/p>\n<p><strong>Also:&nbsp;<a href=\"https:\/\/www.zdnet.com\/article\/email-is-our-greatest-productivity-tool-thats-why-phishing-is-so-dangerous-to-everyone\/\" rel=\"follow\">Email is our greatest productivity tool. That&#8217;s why phishing is so dangerous to everyone<\/a><\/strong><\/p>\n<p>However, while phishing attacks are an effective tool for cyber criminals, falling victim is not inevitable. Proofpoint suggests that organizations should employ a robust spam filter that prevents these messages from arriving in people&#8217;s inboxes, <a href=\"https:\/\/www.zdnet.com\/article\/your-cybersecurity-training-needs-improvement-because-hacking-attacks-are-only-getting-worse\/\" rel=\"follow\">and that organizations should educate end users about this technique<\/a>, and encourage users to report suspicious emails and attachments.&nbsp;<\/p>\n<p>ZDNET has approached Microsoft for comment, but is yet to receive a response at the time of publication.&nbsp;<\/p>\n<h3>MORE ON CYBERSECURITY&nbsp;<\/h3>\n<p>READ MORE <a href=\"https:\/\/www.zdnet.com\/article\/hackers-are-using-this-new-trick-to-deliver-their-phishing-attacks\/#ftag=RSSbaffb68\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Cyber criminals are trying a new method to help ensure phishing attacks are successful &#8211; here&#8217;s what to watch out for.<br \/>\nREAD MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[62],"tags":[],"class_list":["post-50393","post","type-post","status-publish","format-standard","hentry","category-zdnet-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Hackers are using this new trick to deliver their phishing attacks 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/hackers-are-using-this-new-trick-to-deliver-their-phishing-attacks\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Hackers are using this new trick to deliver their phishing attacks 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/hackers-are-using-this-new-trick-to-deliver-their-phishing-attacks\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2023-02-03T11:05:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.zdnet.com\/a\/img\/resize\/fa968510adf2df16800d96245a32e1d1e74424e8\/2023\/02\/02\/66779517-7e91-4bea-a8e3-c57b133b7cca\/a-woman-looking-at-her-laptop-with-concern-while-working-from-home.jpg?auto=webp&amp;width=1280\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hackers-are-using-this-new-trick-to-deliver-their-phishing-attacks\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hackers-are-using-this-new-trick-to-deliver-their-phishing-attacks\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Hackers are using this new trick to deliver their phishing attacks\",\"datePublished\":\"2023-02-03T11:05:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hackers-are-using-this-new-trick-to-deliver-their-phishing-attacks\\\/\"},\"wordCount\":713,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hackers-are-using-this-new-trick-to-deliver-their-phishing-attacks\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/fa968510adf2df16800d96245a32e1d1e74424e8\\\/2023\\\/02\\\/02\\\/66779517-7e91-4bea-a8e3-c57b133b7cca\\\/a-woman-looking-at-her-laptop-with-concern-while-working-from-home.jpg?auto=webp&amp;width=1280\",\"articleSection\":[\"ZDNet | Security\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hackers-are-using-this-new-trick-to-deliver-their-phishing-attacks\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hackers-are-using-this-new-trick-to-deliver-their-phishing-attacks\\\/\",\"name\":\"Hackers are using this new trick to deliver their phishing attacks 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hackers-are-using-this-new-trick-to-deliver-their-phishing-attacks\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hackers-are-using-this-new-trick-to-deliver-their-phishing-attacks\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/fa968510adf2df16800d96245a32e1d1e74424e8\\\/2023\\\/02\\\/02\\\/66779517-7e91-4bea-a8e3-c57b133b7cca\\\/a-woman-looking-at-her-laptop-with-concern-while-working-from-home.jpg?auto=webp&amp;width=1280\",\"datePublished\":\"2023-02-03T11:05:00+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hackers-are-using-this-new-trick-to-deliver-their-phishing-attacks\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hackers-are-using-this-new-trick-to-deliver-their-phishing-attacks\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hackers-are-using-this-new-trick-to-deliver-their-phishing-attacks\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/fa968510adf2df16800d96245a32e1d1e74424e8\\\/2023\\\/02\\\/02\\\/66779517-7e91-4bea-a8e3-c57b133b7cca\\\/a-woman-looking-at-her-laptop-with-concern-while-working-from-home.jpg?auto=webp&amp;width=1280\",\"contentUrl\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/fa968510adf2df16800d96245a32e1d1e74424e8\\\/2023\\\/02\\\/02\\\/66779517-7e91-4bea-a8e3-c57b133b7cca\\\/a-woman-looking-at-her-laptop-with-concern-while-working-from-home.jpg?auto=webp&amp;width=1280\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/hackers-are-using-this-new-trick-to-deliver-their-phishing-attacks\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Hackers are using this new trick to deliver their phishing attacks\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Hackers are using this new trick to deliver their phishing attacks 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/hackers-are-using-this-new-trick-to-deliver-their-phishing-attacks\/","og_locale":"en_US","og_type":"article","og_title":"Hackers are using this new trick to deliver their phishing attacks 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/hackers-are-using-this-new-trick-to-deliver-their-phishing-attacks\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2023-02-03T11:05:00+00:00","og_image":[{"url":"https:\/\/www.zdnet.com\/a\/img\/resize\/fa968510adf2df16800d96245a32e1d1e74424e8\/2023\/02\/02\/66779517-7e91-4bea-a8e3-c57b133b7cca\/a-woman-looking-at-her-laptop-with-concern-while-working-from-home.jpg?auto=webp&amp;width=1280","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/hackers-are-using-this-new-trick-to-deliver-their-phishing-attacks\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/hackers-are-using-this-new-trick-to-deliver-their-phishing-attacks\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Hackers are using this new trick to deliver their phishing attacks","datePublished":"2023-02-03T11:05:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/hackers-are-using-this-new-trick-to-deliver-their-phishing-attacks\/"},"wordCount":713,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/hackers-are-using-this-new-trick-to-deliver-their-phishing-attacks\/#primaryimage"},"thumbnailUrl":"https:\/\/www.zdnet.com\/a\/img\/resize\/fa968510adf2df16800d96245a32e1d1e74424e8\/2023\/02\/02\/66779517-7e91-4bea-a8e3-c57b133b7cca\/a-woman-looking-at-her-laptop-with-concern-while-working-from-home.jpg?auto=webp&amp;width=1280","articleSection":["ZDNet | Security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/hackers-are-using-this-new-trick-to-deliver-their-phishing-attacks\/","url":"https:\/\/www.threatshub.org\/blog\/hackers-are-using-this-new-trick-to-deliver-their-phishing-attacks\/","name":"Hackers are using this new trick to deliver their phishing attacks 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/hackers-are-using-this-new-trick-to-deliver-their-phishing-attacks\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/hackers-are-using-this-new-trick-to-deliver-their-phishing-attacks\/#primaryimage"},"thumbnailUrl":"https:\/\/www.zdnet.com\/a\/img\/resize\/fa968510adf2df16800d96245a32e1d1e74424e8\/2023\/02\/02\/66779517-7e91-4bea-a8e3-c57b133b7cca\/a-woman-looking-at-her-laptop-with-concern-while-working-from-home.jpg?auto=webp&amp;width=1280","datePublished":"2023-02-03T11:05:00+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/hackers-are-using-this-new-trick-to-deliver-their-phishing-attacks\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/hackers-are-using-this-new-trick-to-deliver-their-phishing-attacks\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/hackers-are-using-this-new-trick-to-deliver-their-phishing-attacks\/#primaryimage","url":"https:\/\/www.zdnet.com\/a\/img\/resize\/fa968510adf2df16800d96245a32e1d1e74424e8\/2023\/02\/02\/66779517-7e91-4bea-a8e3-c57b133b7cca\/a-woman-looking-at-her-laptop-with-concern-while-working-from-home.jpg?auto=webp&amp;width=1280","contentUrl":"https:\/\/www.zdnet.com\/a\/img\/resize\/fa968510adf2df16800d96245a32e1d1e74424e8\/2023\/02\/02\/66779517-7e91-4bea-a8e3-c57b133b7cca\/a-woman-looking-at-her-laptop-with-concern-while-working-from-home.jpg?auto=webp&amp;width=1280"},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/hackers-are-using-this-new-trick-to-deliver-their-phishing-attacks\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Hackers are using this new trick to deliver their phishing attacks"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/50393","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=50393"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/50393\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=50393"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=50393"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=50393"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}