Unique Malspam Campaign Uses MS Publisher to Drop a RAT on Banks

🗓️ 17 Aug 2018 18:47:27Reported by Lindsey O'DonnellType

Unique Malspam Campaign Uses MS Publisher to Drop a RAT on Banks. A malspam campaign is targeting banks using Microsoft Office Publisher files to deliver the FlawedAmmyy remote-access trojan (RAT) via URLs in emails. The RAT allows attackers to control victims’ machines remotely, with leaked source code for Ammyy Admin version 3 and features such as remote desktop control, file system manager, proxy support, and audio chat

Source	Link
threatpost	www.threatpost.com/romance-scams-drive-necurs-botnet-activity-in-run-up-to-valentines-day/129897/
trustwave	www.trustwave.com/Resources/SpiderLabs-Blog/Malspam-Campaign-Targets-Banks-Using-Microsoft-Publisher/
media	www.media.threatpost.com/wp-content/uploads/sites/103/2018/08/17141001/Screen-Shot-2018-08-17-at-2.05.22-PM.png
media	www.media.threatpost.com/wp-content/uploads/sites/103/2018/08/17141053/Screen-Shot-2018-08-17-at-2.05.30-PM-e1534529465972.png
threatpost	www.threatpost.com/massive-malspam-campaign-finds-a-new-vector-for-flawedammyy-rat/134262/

17 Aug 2018 18:47Current

7.4High risk

Vulners AI Score7.4