Yesterday, a reader reported to us a malicious ZIP archive (SHA256: a0104921a2d37ab87482ac9a9f5c3713479c118846c3e999178e75b81620c094[1]). Once unzipped, it contains a VHDX file that discloses a malicious JavaScript after being mounted (which is automatic on modern Windows OSs):
From a VHDX File to a Remcos RAT, (Tue, Jun 16th)
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2026-06-16 07:09 UTC
- Importiert: 2026-06-24 01:35 UTC
- Quelle-ID:
sans_isc - uid_hash:
ee956a4fd837fb93883fb5fa516600762dd8da1471e8e59523d8ef06ee6f23e9
Inhalt
| No data |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| SANS Internet Storm Center | security_news | - | de | https://isc.sans.edu/rssfeed.xml |