'CAETANO FORMULA' Email Scam

Cybersecurity researchers have uncovered another spam email campaign that is delivering malware threats. The threat actors responsible for this threatening operation appear to be targeting users in Europe mainly, with the goal of obtaining confidential or sensitive information from the infected devices. 

The lure emails used in the "CAETANO FORMULA" email scam are designed to appear as a confirmation for a new order or purchase from CAETANO FORMULA, a representative for the Renault and Dacia automobiles in Portugal. The email message claims that users must confirm their new order, implying that they will need to open the attached file and make sure that all of the supposed information in it is correct. However, once the file is executed, its harmful programming will proceed to infect the user's device with the Agent Tesla RAT. 

Agent Tesla is a potent Remote Access Trojan (RAT) with numerous intrusive capabilities. The threat actors can use the threat to establish keylogging routines on the breached device, as well as extract data from popular Web browsers, messaging apps, VPNs and FTP clients. The compromised data can lead to serious consequences, including identity theft, loss of personal accounts, monetary losses and more.