### Overview
The initial access vector utilized by The Mask's Careto campaign is spear-phishing emails. These emails contain malicious attachments designed to look like legitimate documents.

### Key Findings
- **Targeted Individuals**: High-ranking government officials.
- **Email Characteristics**: Often mimics internal government communications, increasing the likelihood of the target opening the attachment.
- **Attachment Type**: Commonly uses office document formats with embedded macros.

### Next Steps
Investigate the execution of malicious scripts triggered by these attachments to understand the malware's behavior post-initial access.