AI-Obfuscated Phishing - Fileless Credential Exfiltration

Ibrahim Saud@tektrix

•updated Jun 22, 2026•0•0•6

Detects the execution of a local, polymorphic HTML file that contains AI-obfuscated JavaScript, followed by an HTTP POST request to an external server within a 5-minute window, indicating potential credential exfiltration.