VBS looks popular these days! After the last Didier’s diary, I found another interesting script. It started with an email that referenced a fake due invoice. The invoice icon pointed to a URL. Usually, such URLs display a fake login page asking for credentials. Not this time.
Article Link: https://isc.sans.edu/diary/rss/29956