Transaction-cancellation email lures executives to a malicious document

Documented campaign

How the approach works

Executives and decision makers at banks, financial firms, professional services and enterprise-software businesses received a cancellation request linking to a Word document. Opening the exploit document could install a downloader and Spy.Sekur malware.

What they wanted

Install malware and obtain access to business systems

Reported outcome

Targeted delivery and malware behavior documented. Individual compromise and loss totals unknown.