Do Son Operation FrostBeacon targets Russian B2B with Cobalt Strike. The dual attack uses LNK files and chained legacy exploits (CVE-2017-0199/11882) to gain persistent, financially motivated access.
CVE-2017-0199
An old Microsoft Office vulnerability (CVE-2017-0199) is being exploited in a new phishing campaign to deploy the FormBook infostealer malware. Update now!
Explore the advanced tactics of the infamous SmokeLoader malware campaign. Discover how it used phishing emails and plugins to launch multi-layered attacks.
Stay informed about the latest phishing campaign using the Remcos RAT. Learn how the CVE-2017-0199 vulnerability is exploited to gain remote access to victims' computers.
Beware of Snake Keylogger: a new variant targeting unsuspecting victims. Find out how it infiltrates systems and steals sensitive information.
Explore the advanced tactics and techniques employed by SideWinder, a notorious nation-state threat actor. Find out how they evade detection and deliver targeted implants.
FortiGuard Labs has recently identified a new phishing campaign deploying a variant of the notorious Agent Tesla malware
MalDocs leveraging old CVEs often evade detection due to their sophisticated evasion techniques. These techniques include encryption