VERY IMPORTANT

GSC detected signs of a new cyber attack on Thursday, December 28, just before the new year. The threat actor carried out a hacking attack by disguising the document as an actual event invitation.. Attack impersonating an actual unification strategy field and webinar event scheduled for January 10, 2024. Malicious files disguised as event invitations are manipulated using Google form links and downloaded from Dropbox. A shortcut (LNK) type malicious file exists inside the downloaded ZIP compressed file. Attempt to leak information through pCloud in the style of a typical APT37 group spear phishing attack.