# A new kind of email phishing attack
https://youtu.be/3DxMHGRKJNs?si=9ppU9sIywKYtAK3j
- The new attack takes advantage of HTML and emails
- Is CSS knows where each element will be relevant to the Dom
- Depending on the location relative to the objects it'll reveal hidden messages
- Latro dectis
- The APT was named EA55 77
- They use copyright infringement legal threat emails
- Directions to a website that kicks off JS based loading of the malware
- Basic malware that scans the computer tries to inject itself and then put itself in in auto runs
- This was an extension of iced ID campaigns
-