Asruex Backdoor Variant Infects Word Documents and PDFs Through Old MS Office and Adobe Vulnerabilit

https://blog.trendmicro.com/trendla...ough-old-ms-office-and-adobe-vulnerabilities/

 

I remember that my old HIPS named Neoava Guard had the ability to block modification of .EXE files. Funny to see that file invectors are still a thing.

 

This is interesting. TrendMicro in their article at the end posts an IOC hash. Their own product on VT doesn't have a detection for it. Housecalls detects but not regular Trend engine installed there.