AhnLab ASEC blog (asec.ahnlab.com)
Word Document Attack Targeting Companies Specialized in Carbon Emissions · 2022-03-18
excerpt: On March 18th, the ASEC analysis team discovered a document-borne APT attack targeting companies specialized in carbon emissions. According to logs collected from AhnLab’s ASD (AhnLab Smart Defense), the user of the infected PC appears to have downloaded a malicious word document titled “**** Carbon Credit Institution.doc” through a web browser. While the malicious document […] | attribution sentence: Gold Dragon that is run has similar features as the malware mentioned in the following ASEC blog post: Distribution of Kimsuky Group’s xRAT (Quasar RAT) Confirmed However, whereas the Gold Dragon in the previous case was not equipped with the module that leaks information, the current one has it built-in. | target sentence: On March 18th, the ASEC analysis team discovered a document-borne APT attack targeting companies specialized in carbon emissions.