Ursnif Banking Trojan Campaign Ups the Ante with New Sandbox Evasion Techniques
released on 2016-09-21 @ 02:08:34 AM
This week Proofpoint researchers observed several noteworthy changes in the macros used by an actor we refer to as TA530, who we previously examined in relation to large-scale personalized malware campaigns [5][6]. This new campaign includes new evasive macros and demonstrates continued evolution in their tools and techniques, showcasing attacker adaptation to evolving defenses and the widespread use of sandboxes.