We discovered a potential targeted attack that makes use of legitimate script engine AutoHotkey, in combination with malicious script files. This file is distributed as an email attachment and disguised as a legitimate document with the filename “Military Financing.xlsm.” The user would need to enable macro for it to open fully, which would use AutoHotkey in loading the malicious script file to avoid detection.
The post Potential Targeted Attack Uses AutoHotkey and Malicious Script Embedded in Excel File to Avoid Detection appeared first on .