A Noteworthy Threat: How Cybercriminals are Abusing OneNote – Part 2

We examined how threat actors abuse a OneNote document to install an infostealer. Part 2 of this series discusses an AsyncRAT infection chain while detailing important parts of the code. We’ll also quickly analyze other notable malware strains such as Qakbot and RemcosRAT.

abuse abusing asyncrat code cybercriminals document important infection infostealer install malware onenote qakbot quickly remcosrat series threat threat actors