XWorm Malware Campaign Uses Legitimate Windows RegAsm.exe Process to Hide Malicious Code
Arctic Wolf identified a phishing campaign targeting Colombian organizations that uses legal notices to deliver XWorm, a remote access trojan. The attackers combine heavily protected scripts, PowerShell, and a reusable .NET loader to execute malicious code through the legitimate Windows RegAsm.exe process. The emails used Spanish messages urging recipients to respond quickly. Their attachments carried […] The post XWorm Malware Campaign Uses Legitimate Windows RegAsm.exe Process to Hide Malicious Code appeared first on Cyber Security News .
Continue on CyberPress ↗ ‹ All news Get the newsletter
The summary and image come from CyberPress; the image is shown from their website.