XWorm Malware Campaign Uses Legitimate Windows RegAsm.exe Process to Hide Malicious Code

Arctic Wolf identified a phishing campaign targeting Colombian organizations that uses legal notices to deliver XWorm, a remote access trojan. The attackers combine heavily protected scripts, PowerShell, and a reusable .NET loader to execute malicious code through the legitimate Windows RegAsm.exe process. The emails used Spanish messages urging... Weiterlesen: XWorm Malware Campaign Uses Legitimate Windows RegAsm.exe Process to …