PH!SH Framework
Framework / Techniques /Malicious Attachment
Sub-technique Payload Delivery

Compressed Files

Archive files (.zip, .rar, .7z) conceal malware payloads to evade detection. These archives often contain executable files disguised with double extensions (e.g., invoice.pdf.exe)

Mapped to
MITRE ATT&CK®
T1566.001Spearphishing Attachment T1027.015Compression T1036.007Double File Extension

Connected in PH!SH

Themes
TH0005Document Sharing Service Impersonation TH0015Invoice Phishing TH0016Supply Chain Fraud