Login
From:
The DFIR Report
(Uncensored)
subscribe
IcedID Macro Ends in Nokoyawa Ransomware – The DFIR Report
https://thedfirreport.com/2023/05/22/icedid-macro-ends-in-nokoyawa-ransomware/
links
backlinks
Tagged with:
ransomware
macro
icedid
cobaltstrike
adfind
nokoyawa
xls
Roast topics
Find topics
Find it!
Threat actors have moved to other means of initial access, such as ISO files combined with LNKs or OneNote payloads, but some appearances of VBA macros in Office documents can still be seen in use.…
