New Phishing Campaign Abuses Windows Mshta.exe to Steal Credentials and Secrets
Fortra researchers track an active phishing campaign targeting Spanish speakers that abuses mshta.exe to run HTA payloads for reconnaissance and credential theft.
50
Organization
Fortra FIRE
- Mentions · 7d0
- Mentions · 30d0
- All mentions2
- First seenSep 4, 2026
- Last mentionedSep 12, 2026
Timeline
2 articles · newest firstPhishing Campaign Sends Millions of Emails Using Invisible Unicode to Evade Filters
Microsoft warns of a high-volume phishing campaign using invisible Unicode characters to split keywords like 'funding' and evade filters, peaking at 2.37 million daily messages.
60
Appears with
- Microsoftvendor · 2
- Fortravendor · 2
- ActiveCampaignvendor · 1
- mshta.exeproduct · 1
- GoDaddyorganization · 1
- Italiaonlineorganization · 1
- 7-Zipvendor · 1
- GoDaddyvendor · 1
- libero.itorganization · 1
- ActiveCampaignproduct · 1
- U.S. Small Business Administration loan applicantsvictim · 1
- Mozilla Firefoxvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.