Hosted on MSN

How XWorm is fueling the rise of plug-and-play malware

You don’t need to be a sophisticated attacker to cause serious damage to businesses anymore. Not when malware like XWorm is this cheap, available, and easy to use. XWorm is a type of Remote Access ...
Mena FN

Xworm Technical Analysis: New Malware Version

DUBAI, DUBAI, UNITED ARAB EMIRATES, August 29, 2023/EINPresswire/ -- ANY.RUN , a cybersecurity company developing an interactive sandbox analytical platform for malware researchers, presents the XWorm ...
CSOonline

XWorm campaign shows a shift toward fileless malware and in-memory evasion tactics

In a newly disclosed multi-stage threat campaign, attackers were seen skipping disk and leaning on in-memory tricks to deliver the XWorm remote access trojan (RAT). According to Forcepoint Labs’ ...
Dark Reading

Microsoft Follina Bug Is Back in Meme-Themed Cyberattacks Against Travel Orgs

A threat actor is exploiting last year's Follina (RCE) remote code execution vulnerability to deploy the XWORM remote access trojan (RAT) and data-stealer against targets in the hospitality industry.
Dark Reading

XWorm, Remcos RAT Evade EDRs to Infect Critical Infrastructure

The Rust-based injector Freeze[.]rs has been weaponized to introduce a raft of malware to targets, in a sophisticated phishing campaign containing a malicious PDF file that gets around endpoint ...
CSOonline

Phishing campaign chains old Office flaw with fileless XWorm RAT to evade detection

The campaign exploits an Office vulnerability to deliver the modular XWorm RAT, chaining HTA, PowerShell, and in-memory .NET execution to sidestep detection and expand post-compromise control.