Campaigns Spread InfoStealer Malware Targeting Italy, Germany, and Turkey

Threat Level

Attack Report

For a detailed threat advisory, download the pdf file here

Summary

A number of campaigns have been launched that spread InfoStealer malware written in the .NET programming language using phishing emails and Windows Shortcut (LNK) files and Batch Scripts (BAT). Based on the TTPs and evidence extracted, it appears the attacks were conducted by the same adversary (internally called AUI001).