Trend Micro researchers discovered Water Makara targeting Brazil with Astaroth malware in spear phishing attacks, using obfuscated JavaScript to deliver banking malware through malicious emails pretending to be urgent tax documents, with malicious ZIP files containing encoded JavaScript commands executed via mshta.exe, posing a threat to various industries like manufacturing, retail, and government agencies, with Trend Micro's existing mitigation policies proving effective against this attack. ```
https://www.trendmicro.com/en_us/research/24/j/water-makara-uses-obfuscated-javascript-in-spear-phishing-campai.html