remote-access-trojan

Security researchers identified a social engineering campaign targeting finance professionals that abuses Obsidian plugins to deploy the PHANTOMPULSE remote access trojan. The malware utilizes a novel Ethereum blockchain-based mechanism for command-and-control communication to evade detection.