New Phishing Attack Uses Clever Microsoft Office Trick to Deploy NetSupport RAT

New phishing campaign targeting US organizations using clever Microsoft Office trick to deploy NetSupport RAT. Operation PhantomBlu introduces OLE template manipulation to execute malicious code while evading detection. Phishing email disguised as salary report, using legit email marketing platform. Instructs victim to open Word doc, enabling editing, and double-clicking embedded printer icon to view salary graph, leading to NetSupport RAT deployment. Threat actors increasingly abuse public cloud services and Web 3.0 data-hosting platforms for phishing URLs.