Malware Disguised as a Manuscript Solicitation Letter (Targeting Security-Related Workers)

On January 8th, the ASEC analysis team identified the distribution of a document-type malware targeting workers in the security field. The obtained malware uses an external object within a Word document to execute an additional malicious macro. Such a technique is called the template Injection method. and a similar attack case was covered in a previous blog post.

When the Word document is opened, it downloads and executes …

analysis asec attack blog blog post called case distribution document documents external injection january korea letter link macro malicious malware malware analysis manuscript north north korea object security targeting team template template injection word word document workers