article thumbnail

Researchers uncovered a new Malware Builder dubbed APOMacroSploit

Security Affairs

In order to avoid detection, the BAT scripts add the malware location in the exclusion path of Windows Defender and disabling Windows cleanup before executing the malware. In at least one attack, the threat actors used a Delphi Crypter along with a second-stage malware, a remote access Trojan dubbed BitRAT.

Cleanup 116