A custom PowerShell RAT uses to target German users using Ukraine crisis as bait
Security Affairs
MAY 16, 2022
The threat actors attempt to trick victims into opening weaponized documents by using the current situation in Ukraine as bait. The site was hosting a bait document, named “2022-Q2-Bedrohungslage-Ukraine,” used to deliver the custom malware. The document appears to contain information about the current crisis in Ukraine.
Let's personalize your content