Microsoft warns users about malicious disk image files in spam emails.

Microsoft was able to detect multiple malicious spam due to advance machine learning thereat detection model. Attackers are using COVID-19 email subject line to trick users.  In multiple tweets Microsoft Security Intelligence mentioned that ISO or IMG from these emails are infected by Remcos remote access trojan (RAT) which allows hackers to get a full control.

One of the campaigns targeted small businesses that are looking for disaster loan with a fake “application form”, another one is targeting manufacturing companies in South Korea with malicious ISO attachment, third was focused on US accountants with an “update” for American Institute of CPAs.