OfflRouter virus causes Ukrainian users to upload confidential documents to VirusTotal

During a threat-hunting exercise, Cisco Talos discovered documents with potentially confidential information originating from Ukraine. The documents contained malicious VBA code, indicating they may be used as lures to infect organizations.

cisco cisco talos code confidential documents exercise hunting infect information malicious may offlrouter organizations securex talos threat threats threat spotlight ukraine ukrainian upload vba virus virustotal