Bitter Group Distributes CHM Malware to Chinese Organizations

The Bitter (T-APT-17) group is a threat group that usually targets South Asian government organizations, using Microsoft Office programs to distribute malware such as Word or Excel. AhnLab Security Emergency response Center (ASEC) has identified multiple circumstances of the group distributing CHM malware to certain Chinese organizations. CHM files have been used by various threat groups in APT attacks since earlier this year and covered multiple times in ASEC blog posts.

The files used in the recent attack were being …

ahnlab apt asec attachments attack attacks bitter blog blog posts center chinese chm distributed emails emergency excel files government malware malware analysis microsoft microsoft office office organizations response security south threat threat group threat groups word