Security researchers from McAfee spotted a Phishing campaign targeting companies associated with Pyeongchang Olympic 2018. The multi-sport event is to take place in South Korea. The campaign started on December 22, 2017, and the activity appeared up to December 28, 2017. Attackers embedded malicious documents as a hypertext application (HTA) file and then hide it as an image in the remote server with visual basic macros to launch the decoder script. Researchers said they also wrote custom PowerShell code to decode the hidden image and reveal the implant.”]