A new complex phishing campaign has been observed distributing the AsyncRat trojan through a HTML and ISO file. Attackers intend to remotely access and control victims’ PCs via an encrypted channel.

“Through a basic email phishing strategy with an HTML connection, danger aggressors are conveying AsyncRAT (a remote access trojan) intended to remotely screen and control its tainted PCs through a protected, encoded association,” Michael Dereviashkin, a security specialist at big business break anticipation firm Morphisec, said in a report.

The interruptions start with an email message containing a HTML connection that is veiled as a request affirmation receipt (e.g., Receipt-.html). Opening the bait document diverts the message beneficiary to a page inciting the client to save an ISO record.

Source: https://thedigitalhacker.com/programmers-using-new-evasive-technique-to-deliver-asyncrat-malware/