Today > vulnerabilities   -   You can now download lists of IOCs here!

Tag: vba macros

1 attack reports | 0 vulnerabilities

Attack reports

Threat actors using MacroPack to deploy Brute Ratel, Havoc and PhantomCore payloads

Multiple Microsoft Office documents generated by the MacroPack framework have been discovered, likely used by malicious actors to deploy various payloads. These documents, uploaded to VirusTotal between May and July 2024, originated from different countries including China, Pakistan, Russia, and th…

havoc
phantomcore
2024-09-03
brute ratel
vba macros
macropack
Published: September 3, 2024

Downloadable IOCs 16

» Click here to see all Attack Reports «