LODEINFO Fileless Malware Evolves with Anti-Analysis and Remote Code Tricks

[silversurfer]

Content source

https://thehackernews.com/2024/01/lodeinfo-fileless-malware-evolves-with.html

Cybersecurity researchers have uncovered an updated version of a backdoor called LODEINFO that's distributed via spear-phishing attacks.

The findings come from Japanese company ITOCHU Cyber & Intelligence, which said the malware "has been updated with new features, as well as changes to the anti-analysis (analysis avoidance) techniques."

 

[Dave Russo]

Thanks for the article, interesting to see, that in its (virus) original attack and then updated attack, there seemed to be human error to alow.
"While the maldoc requires users to enable macros to activate the killchain, the June 2022 campaign was found to drop this method in favor of an SFX file that, when executed, displays a harmless decoy Word document to conceal the malicious activities.". Glad to see(in the article)that Kaspersky and Eset both detect this