downloading malware disguised as security patches, according to Malwarebytes. • The SSL-enabled phishing site is spoofed to look like one managed by the German Federal Office for Information Security (BSI), explained the vendor's lead malware intelligence analyst, Jerome Segura. • This fake domain links to a ZIP archive