Malware Attackers Using MacroPack to Deliver Havoc, Brute Ratel, and PhantomCore
Malware Attackers Using MacroPack to Deliver Havoc, Brute Ratel, and PhantomCore
05 September 2024
Threat actors are likely employing a tool designated for red teaming exercises to serve malware, according to new findings from Cisco Talos.
The program in question is a payload generation framework called MacroPack, which is used to generate Office documents, Visual Basic scripts, Windows shortcuts, and other formats for penetration testing and social engineering assessments. It was developed