Remove tag targeted-advertising
article thumbnail

TA505 Cybercrime targets system integrator companies

Security Affairs

During a normal monitoring activity, one of the detection tools hits a suspicious email coming from the validtree.com domain. That IP is assigned to Frontier Communications Solutions: a NY based company. An interesting Maldoc acting as drop-and-execute was identified and spotted in the wild targeting System Integrator based in Europe.