Hancitor tries XLL as initial malware file
released on 2021-07-09 @ 11:09:02 AM
On Thursday 2021-07-08, for a short while when Hancitor was initially active, if any victims clicked on a malicious link from the malspam, they would receive a XLL file instead of a malicious Word doc.