
In an era where digital sophistication grows both in legitimate and adversarial realms, cybercriminals have been increasingly resorting to advanced HTML techniques to circumvent email security filters and perpetrate phishing attacks with disturbing success. These malicious actors disguise their emails as official documents such as invoices or HR policies, utilizing HTML attachments filled with embedded JavaScript. This JavaScript often harbors