Arctic Wolf identified a phishing campaign targeting Colombian organizations that uses legal notices to deliver XWorm, a remote access trojan. The attackers combine heavily protected scripts, PowerShell, and a reusable .NET loader to execute malicious code through the legitimate Windows RegAsm.exe process. The emails used Spanish messages urging... Weiterlesen: XWorm Malware Campaign Uses Legitimate Windows RegAsm.exe Process to …
Intelligence View
⚡ tsecurity.de Intelligence
XWorm Malware Campaign Uses Legitimate Windows RegAsm.exe Process to Hide Malicious Code
Arctic Wolf identified a phishing campaign targeting Colombian organizations that uses legal notices to deliver XWorm, a remote access trojan. The attackers…
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar