Italian Invoice-Themed Phishing Campaign Delivers UpCrypter and NeptuneRAT
Over Security - Cybersecurity news aggregator [Unofficial]
June 17, 2026
Italian invoice-themed phishing campaign targeting users since February 2026. The infection chain abuses HTML attachments, fake download pages, JavaScript, PowerShell, and UpCrypter to deploy a final NeptuneRAT/MasonRAT payload.
Discussion in the ATmosphere