Tag: macropack

1 Attack Reports | 0 Vulnerabilities

Attack reports

Threat actors using MacroPack to deploy Brute Ratel, Havoc and PhantomCore payloads

Multiple Microsoft Office documents generated by the MacroPack framework have been discovered, likely used by malicious actors to deploy various payloads. These documents, uploaded to VirusTotal between May and July 2024, originated from different countries including China, Pakistan, Russia, and th…
havoc
phantomcore
2024-09-03
brute ratel
vba macros
macropack
Published: September 3, 2024
Downloadable IOCs: 16
Click here to see more Attack Reports