Woody RAT leverages Follina to target Russia

Threat Level

Attack Report

For a detailed advisory, download the pdf file here

Summary

The unknown threat actor employs the Woody RAT to spear-phish Russian organizations. The malware was distributed via archive files and later switched to Microsoft Office documents leveraging the now-patched CVE-2022-30190 vulnerability.