Stealthy Malware Spreading Remcos RAT and Formbook in Europe

[vtqhtr413]

Content source

https://thehackernews.com/2023/03/stealthy-dbatloader-malware-loader.html

A new phishing campaign has set its sights on European entities to distribute Remcos RAT and Formbook via a malware loader dubbed DBatLoader. "The malware payload is distributed through WordPress websites that have authorized SSL certificates, which is a common tactic used by threat actors to evade detection engines," Zscaler researchers Meghraj Nandanwar and Satyam Singh said in a report published Monday. The findings build upon a previous report from SentinelOne last month that detailed phishing emails containing malicious attachments that masquerade as financial documents to activate the infection chain. Some of the file formats used to distribute the DBatLoader payload concern the use of a multi-layered obfuscated HTML file and OneNote attachments.

Stealthy DBatLoader Malware Loader Spreading Remcos RAT and Formbook in Europe

New phishing campaign targets European entities using Remcos RAT & Formbook via DBatLoader malware!

thehackernews.com