#OneNote

Vulnerability/Target

2023-03-17 • Kimsuky group appears to be exploiting OneNote like the cybercrime group

Microsoft OneNote files can embed objects and scripts within notebook pages. Kimsuky used malicious OneNote files disguised as survey-compensation documents, hiding a VBS script behind a fake HWP attachment image to download and execute additional malware.

Tagged Reports

« Back