Source |
Palo Alto Network |
Identifiant |
4430 |
Date de publication |
2016-07-20 12:00:50 (vue: 2016-07-20 12:00:50) |
Titre |
Technical Walkthrough: Office Test Persistence Method Used In Recent Sofacy Attacks |
Texte |
As mentioned in our previous blog, we observed the Sofacy group using a new persistence mechanism that we call “Office Test” to load their Trojan each time the user opened Microsoft Office applications. Following the… |
Notes |
|
Envoyé |
Oui |
Condensat |
alto appeared applications attacks blog call each first following group load mechanism mentioned method microsoft networks new observed office opened palo persistence post previous recent sofacy technical test test†the…the time trojan used user using walkthrough: “office |
Tags |
|
Stories |
|
Move |
|