NetDefend IPS
IPS Advisories
NetDefend
Anti-Virus
Anti-Virus Advisories
NetDefend Web Content Filtering
NetDefend IP Reputation
NetDefend Update Center
IPS History
Oct 17, 2024
Oct 09, 2024
Oct 04, 2024
Oct 03, 2024
Sep 25, 2024
Anti-Virus History
Feb 12, 2022
Jan 06, 2022
Oct 23, 2021
Aug 29, 2021
Aug 23, 2021
Home > NetDefend Live > NetDefend IPS Service
NetDefend IPS Service
Print
Advisory ID
48732
Name
MALWARE.XLOADER.FORMBOOK.INFECTION.H
IPS Signature
Advanced IPS Signature
IPS Group
IPS / MALWARE / GENERAL
Issued
Aug 14, 2024
Description
The infection chain starts with a phishing email in Mozilla Thunderbird, which contains a malicious RAR file attachment with an .exe file that leads to the FormBook (XLoader) infostealer malware. FormBook steals sensitive data, including keystrokes, login credentials, and clipboard data, and can also download and execute additional malicious code. The malware can receive commands from attackers, allowing them to install other malware on the infected system, making it a significant threat to data security.
Enter your details in the box below to receive an email each time we post a new issue of our newsletter.





Click here to unsubscribe


Nov 28, 2024