cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Claim your free VMworld 2020 ticket now for a completely digital experience to learn about how VMware Carbon Black can protect you from sophisticated threats.

TAU-TIN - GandCrab and Ursnif Campaign

TAU-TIN - GandCrab and Ursnif Campaign

Summary

The Carbon Black ThreatSight service discovered an ongoing campaign.  This campaign originally came in via phishing emails that contained an attached Word document with embedded macros, Carbon Black located roughly 180 variants in the wild.  The macro would call an encoded PowerShell script and then use a series of techniques to download and execute both a Ursnif and GandCrab variants.

The technical details of this campaign can be located in the external blog post. 

Labels (1)
0 Kudos
Article Information
Author:
Creation Date:
‎03-05-2019
Views:
407