Attackers Combo Up Evasion Tactics for BEC Phishing

Attackers are using a combination of evasion tactics in business email compromise phishing campaigns. The tactics, referred to as "The TFF Trap", involve the use of fileless techniques and loaders that have low detection rates. These loaders are used to deploy various remote access trojans and stealers, including several specific types of malware. The goal of these campaigns is to steal sensitive information. The use of fileless techniques and low-detection loaders makes it difficult for security systems to detect the malware. The attackers are able to deploy a range of malicious tools using these tactics.