[SecList]WIRTE’s campaign in the Middle East ‘living off the land’ since at least 2019

[igor51]

WIRTE’s campaign in the Middle East ‘living off the land’ since at least 2019

In this report we provide details on a malicious VBS implant distributed via MS Excel droppers and a fake "Kaspersky Update Agent" which we attribute to WIRTE APT who may be linked to Gaza Cybergang.
Source: WIRTE’s campaign in the Middle East ‘living off the land’ since at least 2019