Beware of Phishing Emails Disguised as Quote Confirmation Requests (PhantomStealer)

Reported 19 Aug 2026 by otx · Severity: medium

A phishing campaign has been identified where attackers impersonate sales staff from specific overseas companies, requesting quotation modifications and product version confirmations. The email contains a malicious GZ compressed file that, when extracted, delivers an injector-typ