Email Body:
This is an email notification concerning some documents that needs to be addressed on your account on this day 1/12/2022. Please check the attachment in your email.
If you have any question please call us toll-free at 1-800-729-1200. We can answer specific questions from 8 a.m. to 7 p.m., Monday through Friday. Generally, you will have a shorter wait time if you call during the week after Tuesday. If you are deaf or hard of hearing, you may call our TTY number, 1-800-315-0817.
Thank you for using the Social Security Administration’s services at my Social Security | SSA online.
Please do not reply to this email, as we are unable to respond to messages sent to this address.
It contains an html attachment which opens the following page locally:
It asks you to log in using various credentials in a very well crafted fake window.
According to the javascript source, credentials are sent to:
hxxps://bypatnoad.com.au/wp-content/mu-plugins/…/home/book.php
Attachment (0bin):0bin - encrypted pastebin