Attackers use FTP banners to hide new E4del and PINHOLE RATs

The attack chain begins with a ZIP archive, likely distributed via phishing, which initiates an LNK-based infection.