Remove Cleanup Remove Document Remove e-Discovery Remove Libraries
article thumbnail

A new trojan Lampion targets Portugal

Security Affairs

In contrast, files [1] and [3] are harmless and are only used as a way of inducing the victims to open the VBS document – the Lampion 1st stage. After a few rounds of code cleanup (deobfuscation), the final code comes up. To get details about the library inside the 0.zip Only the [2] file ( FacturaNovembro-4492154-2019-10_8.vbs