Trusted Design

Targeted Threat Leads to Keylogger via Fake Silverlight Update

概要

Proofpoint researchers recently discovered a small email-based campaign attacking a major financial services provider. This attack was notable for a few reasons: The attack was very narrow in scope - a small number of malicious emails appear to have been sent to users in a single organization The emails included a Microsoft Word attachment that used an embedded object rather than macros to avoid detection; the embedded object was also highly obfuscated The payload was an unidentified keylogger hardcoded to send logs from infected computers to two Gmail addresses. While the use of embedded objects instead of macros is not new, malicious macros remain the vector of choice for most threat actors at this time. However, we expect that this technique will become more popular in 2017.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• Veil-Framework Infects Victims of Targeted OWA Phishing Attack (score: 0.59)
• Hawkeye Keylogger – Reborn v8: An in-depth campaign analysis (score: 0.59)
• New Attacks Linked to C0d0s0 Group (score: 0.59)
• Enterprises Hit by BARTALEX Macro Malware (score: 0.58)
• Cloudflare[.]Solutions Keylogger on Thousands of Infected WordPress Sites (score: 0.58)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る