Since March 2024, IBM X-Force has been tracking several large-scale phishing campaigns distributing the GrandoreIt further allows execution of JavaScript commands in the browser to simulate HTML button clicks:

{{javascript:document.getElementById(‘ctl00_Contentplaceholder1_lbNuevaCuenta’).click();}}

{{javascript:document.getElementById(‘ctl00_Contentplaceholder1_btnAceptar’).click();}}

{{javascript:document.getElementById(‘ctl00_Contentplaceholder1_btnContinuar’).click();}}{{javascript:document.getElementById(‘ctl00_Contentplaceholder1_Button17’).click(); }}

jwiqdjqioffjqjfqwfiqwjfqwjfpwqf

fwfqfqwfwqfqwfwqf