#InfoSec #InformationSecurity #CyberSecurity
Fighting against #Malware, #Malspam, and #Phishing. Here to Tweet out #IOCs and gather #OSINT. Paid to #DFIR.
Mar 25, 2020 • 7 tweets • 2 min read
Short thread about a specific malspam campaign delivering ZLoader as there appears to have been a recent uptick in the number of samples being submitted to VT, etc. Also seeing more tweets about the campaign.
The campaign appears to have started in January. At first they used PDF attachments containing Bilty or TinyURL links. These redirected to compromised WordPress sites, that then redirected to newly registered domains under their control, that would then redirect to Zoho Docs.
