New Phishing Campaign Abuses Windows Mshta.exe to Steal Credentials and Secrets
Fortra researchers track an active phishing campaign targeting Spanish speakers that abuses mshta.exe to run HTA payloads for reconnaissance and credential theft.
50
Organization
Italiaonline
- Mentions · 7d0
- Mentions · 30d0
- All mentions1
- First seenSep 12, 2026
- Last mentionedSep 12, 2026
Timeline
1 articles · newest firstAppears with
- Fortra FIREorganization · 1
- Mozilla Firefoxvendor · 1
- Microsoftvendor · 1
- mshta.exeproduct · 1
- GoDaddyorganization · 1
- Fortravendor · 1
- 7-Zipvendor · 1
- GoDaddyvendor · 1
- libero.itorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.