Attackers use “Contact Us” forms and fake NDAs to phish industrial manufacturing firms

A new phishing campaign is targeting industrial manufacturing and supply chain organizations, primarily in the US. The campaign is designed to bypass traditional email security defenses and deliver a custom in-memory backdoor named MixShell.