Nearly 8000 organizations hit by fake voicemail transcript phishing

Check Point Research uncovered a campaign of 58,000 emails mimicking automatic voicemail transcripts. Malicious SVG attachments with JavaScript redirect victims to fake login pages to steal credentials.

• Over 58,000 phishing emails recorded from 17 to 31 August
• More than 7,800 organizations targeted, 38,400 fake addresses used
• SVG attachments bypass filters and contain executable JavaScript
• Login form auto-fills the victim's email for credibility