[Trend]SettingContent-ms can be Abused to Drop Complex DeepLink and Icon-based Payload

[igor51]

SettingContent-ms can be Abused to Drop Complex DeepLink and Icon-based Payload

Microsoft’s SettingContent-ms has become a recent topic of interest. In July, we saw one spam campaign use malicious SettingContent-ms files embedded in a PDF to drop the remote access Trojan FlawedAmmyy, a RAT also used by the Necurs botnet. That campaign was mostly targeting banks in different countries across Asia and Europe.

The post SettingContent-ms can be Abused to Drop Complex DeepLink and Icon-based Payload appeared first on .

Source: SettingContent-ms can be Abused to Drop Complex DeepLink and Icon-based Payload