OTX Threat: Locked and Loaded: Phishing through Fake Bids and Protected Documents

A sophisticated credential phishing campaign leverages fake business bid invitations to target professionals. The attack begins with an email titled 'Project Bid Invitation' containing a password-protected PDF attachment that evades automated security scanning. Once opened, the PDF displays a fake OneDrive button redirecting victims to a fraudulent shared document drive. Recipients are prompted to