The Spreadsheet That Arrived Twice: CR/LF Filename Obfuscation and a Base64 Shadow Payload
A phishing email claiming to deliver an organization-wide clinical data report contained an .xlsx attachment with embedded CR/LF control characters in its filename. Automated scanning detected a zero-byte...
Read more