AiTM Phishing, Hold the Gabagool: Analyzing the Gabagool Phishing Kit

The threat actor would initially compromise the user’s mailbox and begin sending phishing emails to other employees. These emails prompt recipients to view an image attached to the email.