Microsoft has seen a surge in malware campaigns using HTML smuggling to distribute banking malware and remote access trojans. As per Microsoft, it is being increasingly used by threat actors to evade detection, including the Nobelium hacking group.