Collect, Exfiltrate, Sleep, Repeat

In this intrusion from August 2022, we observed a compromise that was initiated with a Word document containing a malicious VBA macro, which established persistence and communication to a command … Read More

The post Collect, Exfiltrate, Sleep, Repeat appeared first on The DFIR Report.

Article Link: Collect, Exfiltrate, Sleep, Repeat - The DFIR Report

1 post - 1 participant

Read full topic

article august collect command communication compromise dfir document intrusion link macro malicious persistence report sleep the dfir report vba vba macro word word document