Warning: Thread Hijacking Attack Targets IT Networks, Stealing NTLM Hashes

The threat actor known as TA577 has been observed using ZIP archive attachments in phishing emails with an aim to steal NT LAN Manager (NTLM) hashes.
The new attack chain “can be used for sensitive information gathering purposes and to enable follow-on activity,” enterprise security firm Proofpoint said in a Monday report.
At least two campaigns taking advantage of this

actor aim archive attachments attack attack chain can emails enable enterprise enterprise security gathering hashes hijacking information information gathering lan manager networks ntlm ntlm hashes phishing phishing emails proofpoint security sensitive sensitive information steal stealing threat threat actor warning zip