2018-10-29 - QUICK POST: HANCITOR INFECTION WITH URSNIF
- Hancitor is back after almost a month off, and the macro from it's word docs is kicking off the infection chain a little differently than before.
- However, the infection traffic looks about the same as last month when Hancitor was first noted pushing Ursnif (link).
- 2018-11-29-Hancitor-infection-with-Ursnif.pcap.zip 522 kB (521,793 bytes)
- 2018-11-29-malware-from-Hancitor-infection.zip 342 kB (341,798 bytes)
Click here to return to the main page.