: The Swiss OASI compensation office (AHV/IV).
: Archives with names like luciferzip often contain obfuscated scripts (VBA macros) or executables designed to bypass basic filters.
Based on available intelligence, this file is likely associated with the following activity: oasi_newfull_luciferzip
Analysis of similar threats labeled under "OASI" or "Oasis" in automated sandboxes suggests the following technical traits: : Primarily Phishing and Credential Harvesting .
: Some associated executable files attempt to reach out to remote command-and-control (C2) servers or download secondary malware like Lucifer (a combined cryptojacker and DDoS bot). Protective Measures If you have encountered this file: : The Swiss OASI compensation office (AHV/IV)
: Check official warnings from the Swiss National Cyber Security Centre (NCSC) regarding OASI-themed scams.
: Phishing emails claiming that a tax or insurance refund is pending. : Some associated executable files attempt to reach
: Often linked to malicious domains (e.g., acrislegt.su , vaganetka.ru ) and servers in Germany or Ukraine that host additional payloads.