WIRTE’s campaign in the Middle East ‘living off the land’ since at least 2019

Minimalist · Nov 29, 2021

This February, during our hunting efforts for threat actors using VBS/VBA implants, we came across MS Excel droppers that use hidden spreadsheets and VBA macros to drop their first stage implant. The implant itself is a VBS script with functionality to collect system information and execute arbitrary code sent by the attackers on the infected machine.
Click to expand...

https://securelist.com/wirtes-campa...ving-off-the-land-since-at-least-2019/105044/

Log in or Sign up

WIRTE’s campaign in the Middle East ‘living off the land’ since at least 2019

Minimalist Registered Member

Log in or Sign up

WIRTE’s campaign in the Middle East ‘living off the land’ since at least 2019

Minimalist Registered Member

Useful Searches