Trusted Design

NECURS BOTNET MALSPAM CONTINUES PUSHING LOCKY

概要

from Malware Traffic Analysis: Necurs Botnet malspam using embedded objects (not DDE attack) for the 2nd day in a row. Like yesterday, the Word documents have embedded objects that call Powershell to retreive the 1st-stage malware.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• NECURS BOTNET MALSPAM STOPS USING DDE, STILL USES WORD DOCS TO PUSH LOCKY (score: 0.81)
• Necurs Botnet malspam stops using DDE, still uses Word docs to push Locky (score: 0.76)
• Malware-Traffic-Analysis.net - 2017-10-24 - Necurs Botnet malspam uses DDE attack to push Locky (score: 0.75)
• Malware-Traffic-Analysis.net - 2017-10-24 - Necurs Botnet malspam uses DDE attack to push Locky (score: 0.75)
• Necurs Botnet malspam continues pushing Locky (score: 0.75)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る