⤷ Title: TTF Trap Campaign Hides a Low-Detection Lua Loader Inside Fake TrueType Font Files
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 12:30:07 +0000
════════════════════════
⌗ Tags: #Malware #Agent Tesla #Donut Shellcode #FortiGuard Labs #Lua Loader #phishing #Remcos #Snake Keylogger #TTF Trap #XWorm
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 12:30:07 +0000
════════════════════════
⌗ Tags: #Malware #Agent Tesla #Donut Shellcode #FortiGuard Labs #Lua Loader #phishing #Remcos #Snake Keylogger #TTF Trap #XWorm
Daily CyberSecurity
TTF Trap Campaign Hides a Low-Detection Lua Loader Inside Fake TrueType Font Files
A global phishing campaign hides a low-detection Lua loader inside fake .ttf font files to drop Remcos, XWorm, Agent Tesla, and a Snake Keylogger. #LuaLoader #TTFTrap #Phishing #FortiGuard #Remcos…