Hackers Use Corrupted ZIPs and Office Docs to Evade Antivirus and Email Defenses
Briefly

The ongoing attack evades #antivirus software, prevents uploads to sandboxes, and bypasses Outlook's spam filters, allowing the malicious emails to reach your inbox.
Although these files operate successfully within the OS, they remain undetected by most security solutions due to the failure to apply proper procedures for their file types.
These messages aim to trick users into opening the attachments with false promises of employee benefits and bonuses. The attack takes advantage of built-in recovery mechanisms.
The end goal of these attacks is to deceive users into opening booby-trapped documents, which embed QR codes that redirect victims to fraudulent websites for malware.
Read at The Hacker News
[
|
]