Cofense iconCofenseSep 10, 2026

False Allegations, Real Threats: Sexual Misconduct Claims Used as Phishing Lures

The campaign uses convincing university branding and trusted services such as Google Drive to bypass email security controls, with more than 80% of observed targets tied to healthcare-related universities. Once installed, the RAT can enable threat actors to control the system, access sensitive information, transfer files, and potentially deliver additional malware such as ransomware.

False Allegations, Real Threats: Sexual Misconduct Claims Used as Phishing Lures

Share this story

Send the public story page.

Useful takeaways from this story.

The campaign uses convincing university branding and trusted services such as Google Drive to bypass email security controls, with more than 80% of observed targets tied to healthcare-related universities.

Once installed, the RAT can enable threat actors to control the system, access sensitive information, transfer files, and potentially deliver additional malware such as ransomware.

Threat actors are impersonating university leaders and using fabricated sexual misconduct allegations to pressure recipients into downloading Zoho Assist, a legitimate remote access tool abused to gain...

Building the complete brief

The page is ready to read now. The fuller skim-friendly version will appear here automatically.

The useful part

The campaign uses convincing university branding and trusted services such as Google Drive to bypass email security controls, with more than 80% of observed targets tied to healthcare-related universities. Once installed, the RAT can enable threat actors to control the system, access sensitive information, transfer files, and potentially deliver additional malware such as ransomware. Threat actors are impersonating university leaders and using fabricated sexual misconduct allegations to pressure recipients into downloading Zoho Assist, a legitimate remote access tool abused to gain control of victims' computers.

Details worth keeping

Threat actors are impersonating university leaders and using fabricated sexual misconduct allegations to pressure recipients into downloading Zoho Assist, a legitimate remote access tool abused to gain control of victims' computers.

Keep reading in the app

Open the app view to save this story, compare related coverage, and continue from the same source.

Open in app