Phishing alert infographic: Invoice email with VBS attachment, arrows to XWorm stealing data; protective shields for filtering and training, with "Verify Emails" warning banner over an inbox.

Cybercriminals use phishing emails disguised as invoices with VBS attachments to deploy XWorm RAT, stealing credentials, logging keystrokes, and enabling ransomware. The malware uses obfuscated scripts and fileless execution for stealth.

Phishing alert infographic: Invoice email with VBS attachment, arrows to XWorm stealing data; protective shields for filtering and training, with "Verify Emails" warning banner over an inbox.Phishing alert infographic: Invoice email with VBS attachment, arrows to XWorm stealing data; protective shields for filtering and training, with "Verify Emails" warning banner over an inbox.

Warning signs: Generic greetings, executable attachments, unsolicited requests. Legitimate invoices come as PDFs via secure portals.

Phishing alert infographic: Invoice email with VBS attachment, arrows to XWorm stealing data; protective shields for filtering and training, with "Verify Emails" warning banner over an inbox.Phishing alert infographic: Invoice email with VBS attachment, arrows to XWorm stealing data; protective shields for filtering and training, with "Verify Emails" warning banner over an inbox.

Protect yourself: Enable email filtering, use anti-malware, train on phishing, and show file extensions. Stay vigilant against evolving email threats.


NPAV offers a robust solution to combat cyber fraud. Protect yourself with our top-tier security product, Z Plus Security