Analysis of the attack activities of the Mahacao group against Pakistan
released on 2022-07-14 @ 11:43:41 AM
Recently, the Red Raindrop team of Qi'anxin Threat Intelligence Center captured several attack samples of the organization in daily threat hunting. In this attack, the attacker uses a vulnerable RTF file to carry out a spear phishing attack. When the victim clicks and executes the decoy file, the BADNEWS Trojan will be executed through the vulnerability.