Skip to content
The Nexus
DossierENTITY

Photo ZIP phishing campaign

Coverage of Photo ZIP phishing campaign in the Nexus archive.

Earliest in view: Jun 26 · 09:27 UTCMost recent: Jun 26 · 09:27 UTC
Co-mentioned in this coverage
Microsoftorganization1Node.js implanttopic1hotels and hospitality organizationstopic1Europeplace1Asiaplace1
Recent coverage
  • SECURITYJun 26 · 09:27 UTCTHE HACKER NEWS
    Microsoft Warns of Photo ZIP Phishing Campaign Targeting Hotels with Node.js Implant

    Microsoft warns of an ongoing phishing campaign targeting hotel and hospitality organizations in Europe and Asia since April 2026. The campaign uses photo-themed ZIP files to deploy a Node.js implant on front-desk machines, with no known attribution to a specific threat actor or clear end goal.

Photo ZIP phishing campaign · Dossier · The Nexus