KeyBoy Abuses Popular Office Exploits for Malware Delivery

guest · Oct 10, 2018

KeyBoy Abuses Popular Office Exploits for Malware Delivery
October 10, 2018
https://www.securityweek.com/keyboy-abuses-popular-office-exploits-malware-delivery

The actor, known as KeyBoy, was first identified in 2013 and has been observed mainly targeting governments and other organizations in South East Asia. The group continues to be active, although it has expanded the targets list, and even hit the energy sector.

Recently, the group was seen abusing an open source version of the popular CVE-2017-0199 exploit to target India's Ambassador to Ethiopia. The actor used a phishing email with an attached document that would download and execute a script to install the final payload.

The group also continued delivering the Android malware family known as Titan, AlienVault’s security researchers reveal. While the infections continue, however, only older sources of the files have been identified.
Click to expand...

Log in or Sign up

KeyBoy Abuses Popular Office Exploits for Malware Delivery

guest Guest

Log in or Sign up

KeyBoy Abuses Popular Office Exploits for Malware Delivery

guest Guest

Useful Searches