"The TFF Trap" uses fileless techniques and loaders with low detection rates to deploy various RATs and stealers, including Agent Tesla, Remcos, XWorm, and Best Private Logger.
Attackers Combo Up Evasion Tactics for BEC Phishing
Summary + source link. No paywalls, no tracking.