tldr - powered by Generative AI

• Phishing campaigns are targeting a wide range of sectors using booby-trapped URLs and ZIP archives.
• The ZIP archives contain JavaScript droppers that download and run DarkGate or PikaBot malware.
• Excel add-in files are also used to deliver the final payloads.
• DarkGate and PikaBot infections can lead to the delivery of advanced crypto mining software, reconnaissance tools, ransomware, or other malicious files.