Portugal-focused phishing campaign delivers multistage malware

Reported 21 Jul 2026 by otx · Severity: medium

An active Lampion malware campaign has been identified targeting Portuguese users through phishing emails that impersonate financial and administrative communications. Lampion, a Brazilian banking malware derived from the ChePro lineage, delivers initial payloads via ZIP archives