Tag: html

3 Attack Reports | 0 Vulnerabilities

Attack reports

RedDelta: Chinese State-Sponsored Group Targets Mongolia, Taiwan, and Southeast Asia with Evolving Cyber Threats

Between July 2023 and December 2024, the Chinese state-sponsored group RedDelta targeted Mongolia, Taiwan, and Southeast Asian countries with an adapted infection chain to distribute its customized PlugX backdoor. The group used themed lure documents and evolved its tactics, transitioning from Wind…
spearphishing
plugx
html
microsoft azure
2025-01-09
cloudflare cdn
shortcut (lnk) file
Published: January 9, 2025
Downloadable IOCs: 259

Exploring the Metamorfo Banking Trojan

This report delves into a malware campaign known as Metamorfo, a banking Trojan that spreads through malspam campaigns. It entices users to click on HTML attachments, initiating a series of activities focused on gathering system metadata. The infection chain involves obfuscation techniques, URL eva…
powershell
html
casbaneiro
metamorfo
2024-05-17
autoit
appdata
script file
deobfuscating
script
Published: May 17, 2024
Downloadable IOCs: 39

The Darkgate Menace: Leveraging Autohotkey & Attempt to Evade Smartscreen

This report details a novel infection chain associated with DarkGate malware, a Remote Access Trojan (RAT) that exploits the AutoHotkey utility and attempts to bypass Microsoft Defender SmartScreen. The infection begins with an HTML-based entry point or an XLS file, utilizing techniques such as dis…
html
autohotkey
darkgate
CVE-2023-36025
CVE-2024-21412
microsoft defender smartscreen
xls file
Published: April 30, 2024
Downloadable IOCs: 15
Click here to see more Attack Reports