Nim Backdoor Masquerades as Nepal Government Security

Amber | Vulnerability Report

Attackers employed malicious Microsoft Word documents disguised as official communications from the Nepali government. These documents aimed to trick victims into downloading and executing a backdoor program written in the Nim programming language. As Nim is an uncommon language, it poses challenges for analysis and underscores the need for ongoing vigilance in the security community.

Reduce real exposure. Not just vulnerability volume.