THREATOPS

THREAT OPS › Threat News › Phishing Campaign Deploys JavaScript-Driven PureLogs Variant to Steal Sensitive Data

Phishing Campaign Deploys JavaScript-Driven PureLogs Variant to Steal Sensitive Data

lowfortinet_researchPublished 2026-05-26

<p>FortiGuard Labs analyzed a new phishing campaign that uses obfuscated JavaScript, PowerShell, process hollowing, and PureLogs to steal sensitive data</p><img align="left" alt="" border="0" height="1" hspace="0" src="https://feeds.fortinet.com/~/i/957300263/0/fortinet/blog/threat-research" style="border: 0; float: left; margin: 0; padding: 0; width: 1px!important; height: 1px!important;" width="

MITRE ATT&CK techniques

JavaScriptT1059.007
PowerShellT1059.001
Process HollowingT1055.012

Indicators of compromise

assets.feedblitz.comdomain

Original source: https://feeds.fortinet.com/~/957300263/0/fortinet/blog/threat-research~Phishing-Campaign-Deploys-JavaScriptDriven-PureLogs-Variant-to-Steal-Sensitive-Data