Hackers Hide Agent Tesla Malware Behind Emojis to Steal Browser and Email Passwords

Hackers are distributing the Agent Tesla v4 infostealer via emoji-filled JScript attachments that bypass security detection by concealing malicious code within visual noise. This business email compromise campaign targets finance teams by masquerading as legitimate payment documentation to steal sensitive browser and email credentials.

Edward Kiledjian @ekiledjian