From cybersecuritynews.com
A new business email campaign attacks enterprise users aiming to deliver NetWire remote-access Trojan through an IMG file.
NetWire RAT used by hackers since 2012, and it is mostly distributed through phishing emails with malicious attachments.
The malware undergoes various upgrades and it was used by Nigerian scammers to advanced persistent threat (APT) groups.
It was also sold in dark web markets which let any threat actor purchase it and use launching attacks.