Files with TXZ extension used as malspam attachments

Tags

External References

• https://isc.sans.edu/
• https://otx.alienvault.com/

Description

A recent report describes a malspam campaign distributing malware payloads in attachments with TXZ file extensions. The attachments were RAR archives with renamed extensions, likely attempting to exploit native TXZ support in Windows 11. Two campaigns distributed the payloads, one with GuLoader malware targeting Spain and Slovakia, the other with Formbook targeting Croatia and Czechia.

Date