VERY IMPORTANT

In early April, Trend Micro observed a new information stealer called Panda Stealer being delivered via spam emails. Based on Trend Micro's telemetry, United States, Australia, Japan and Germany were among the most affected countries during a recent spam wave. A modified fork of the malware Collector Stealer, Panda Stealer also utilizes a fileless approach in its distribution to evade detection. Panda Stealer is deployed through spam emails posing as business quote requests to lure unwary victims into opening malicious Excel files. Trend Micro has identified two infection chains: in one, an .XLSM attachment contains macros that download a loader. Then, the loader downloads and executes the main stealer.