Researchers have uncovered a new advanced campaign delivery strategy that can elude multiple security companies. AsyncRAT is being distributed as part of the campaign to remotely monitor and control the targeted systems.
The victims receive an email message with an HTML receipt attachment. When the receiver opens the email, they are directed to a web page where they must save a downloaded ISO file.