Threat actors are weaponizing event invitation-themed emails spoofing platforms such as Punchbowl, Evite, Paperless Post, and Greenvelope to deliver credential phishing pages and remote access malware. Campaigns use device-detection logic within malicious URLs to serve ConnectWise RAT or Datto RMM to desktop users and credential harvesting pages to mobile users from the same link. Abused legitimate remote access tools bypass automated defenses, and AI-assisted email crafting produces lures visually indistinguishable from genuine platform communications.
datto-rmm
1 post
You're Invited to get Phished! Why Invitation-themed Emails Remain Effective