Serpent, No Swiping! New Backdoor Targets French Entities with Unique Attack Chain
released on 2022-03-21 @ 11:40:19 AM
Security researchers observed new, targeted activity impacting French entities in the construction and government sectors. The threat actor used macro-enabled Microsoft Word documents to distribute the Chocolatey installer package, an open-source package installer. Various parts of the VBA macro include the following ASCII art and depict a snake as below.