Tag: macros

2 Attack Reports | 0 Vulnerabilities

Attack reports

Operation MacroMaze: New APT28 Campaign Using Basic Tooling and Legitimate Infrastructure

Operation MacroMaze, attributed to APT28 (Fancy Bear), targets entities in Western and Central Europe from September 2025 to January 2026. The campaign utilizes basic tools and legitimate services for infrastructure and data exfiltration. Multiple documents with varying macro variants act as droppe…
fancy bear
exfiltration
persistence
html
webhook
macros
vbscript
2026-02-16
batch files
droppers
operation macromaze
Published: February 16, 2026
Downloadable IOCs: 7

Distribution of DanaBot Malware via Word Files Detected

This analysis examines the infection process of the DanaBot malware, distributed through sophisticated spam emails containing malicious Word documents. The documents leverage external links to download and execute macro files, which subsequently fetch and run the DanaBot payload. The infection chai…
malware
evasion
data theft
spam
2024-05-09
macros
danabot
2024-05-14
2024-05-10
Published: May 14, 2024
Downloadable IOCs: 0
Click here to see more Attack Reports