New FinalDraft malware abuses Outlook mail service for stealthy comms
A new piece of malware known as FinalDraft has been attacking a ministry in a South American nation by utilizing Outlook email drafts for command-and-control communication.
Elastic Security Labs found the attacks, which use a whole suite of tools, including the FinalDraft backdoor, many post-exploitation tools, and a unique malware loader called PathLoader.
In this instance, the goal of Outlook misuse is to accomplish covert communications, which enables the attackers to carry out lateral movement, process injection, data exfiltration, and proxying with the least amount of trace feasible.
The threat actor uses PathLoader, a little executable file that runs shellcode, containing the FinalDraft malware read more about New FinalDraft malware abuses Outlook mail service for stealthy ...