FortinetSecurityThreats The TTF Trap: A Global Campaign of a Low-Detection Lua Loader September 21, 2026 Administrator FortiGuard Labs analyzes a global phishing campaign using obfuscated JScript, disguised .ttf files, and Lua loaders to deliver RATs and infostealers.