Analyzing CryptoJS Encrypted Phishing Attempt - Binary Defense ARC Labs

Binary Defense ARC Labs recently analyzed a phishing email used in a credential harvesting campaign that leveraged a lure that notified the target that they received a voice message and they needed to visit a link to access it.

The following guide is an overview of the steps taken by Binary Defense ARC Labs to retrieve the encrypted content from within the embedded JavaScript code.