These phishing emails are targeting healthcare providers.
- The email has a subject of “(Victim Organization) (Date) Business Review” and utilizes a Secure Message theme.
- Inside of the email is a malicious link that takes the recipient to an Evernote site that looks like it belongs to the Victim Organization.
- On that site is an HTML download that is Trojan malware that steals usernames and passwords and other sensitive credentials and information.