Microsoft OneNote Documents Used To Deliver Malware
Malicious actors are distributing spear-phishing emails with malicious Microsoft OneNote documents to infect users with backdoors, remote access trojans, and information stealers.
The malicious software used in the campaigns include Qbot, AsyncRAT, Agent Tesla, DOUBLEBACK, Netwire, QuasarRAT, RedLine Stealer, and XWorm.
Multiple Windows binaries are used to carry out the operation including PowerShell, cmd.exe, and curl.exe.
Featured Resources
View More Resources
blog
MITRE ATT&CK v19 Unpacked: What Changed and How to Operationalize
MITRE ATT&CK v19 introduces major changes that reshape how organizations understand and validate adversary behavior, including retiring the Defense Evasion tactic and introducing Stealth and Defense Impairment tactics.
Cymulate Event
CymuLab Live: A Hands-On Lab
Cymulate Event