Scopri come Formbook, un potente infostealer, colpisce le reti aziendali e come ELMI aiuta a prevenire e rilevare queste minacce con soluzioni integrate di sicurezza informatica.

Cybersecurity researchers detail phishing campaigns targeting SMBs in Poland, deploying malware like Agent Tesla and Formbook.

A new malware loader called JinxLoader is being used by threat actors to deliver payloads such as Formbook and XLoader.

Negli ultimi giorni si è tornati a parlare di FormBook, un malware noto per la sua capacità di rubare dati sensibili, e che ora si presenta sotto una

YouTube video by WRRAP Welsh Rugby Podcast

Bahrain forms a blurry picture of F1’s 2025 formbook

フィッシングを通じてFormBookマルウェアを配布するために、CVE-2017-0199を悪用する悪意のあるExcelファイルが利用されています。

Introduction Malware authors increasingly lean on multi-stage, multi-language infection chains to evade detection and frustrate analysts. This article walks through a recent, real-world FormBook delivery that used obfuscated VBS and PowerShell scripts, staged downloads from cloud storage, and process injection — a textbook example of how simple mail attachments can escalate into a full-featured data-stealer. Below you’ll find a clear summary of the original investigation, a deeper analytical breakdown from Undercode, compact fact-check results, and a short prediction about where this delivery technique is headed.

Negli scorsi giorni il CERT-AGID ha individuato e analizzato una campagna mirata alla diffusione del malware FormBook tramite e‑mail dirette, presumibilmente, a operatori del settore edilizio. Il mes...

A new phishing campaign delivers FormBook malware via Word docs, exploiting CVE-2017-11882. The fileless attack uses process hollowing to evade detection.

TA558 hackers are using steganography to hide and distribute malware like Agent Tesla, FormBook, Remcos RAT, LokiBot.

When I'm teachning FOR610[1], I always say to my students that reverse engineering does not only apply to “executable files” (read: PE or ELF files). Most of the time, the infection path involves many stages to defeat the Security Analyst or security controls. Here is an example that I found yesterday. An email was received via an attached ZIP archive. It contained a simple file: “Payment_confirmation_copy_30K__202512110937495663904650431.vbs” (SHA256:d9bd350b04cd2540bbcbf9da1f3321f8c6bba1d8fe31de63d5afaf18a735744f) identified by 17/65 antiviruses on VT[2]. Let's have a look at the infection path.

Third-placed Burnley will take on bottom-of-the-table Argyle in the Championship at Home Park on Wednesday night