Recently, a short, simple email with a suspicious RTF attachment that had been sent to a telecommunications agency in South Asia caught the attention of FortiGuard Labs. The email was disguised as coming from a division of the Pakistani government. and delivered the PivNoxy malware.<\/p>\n
It should be noted that this threat is targeting Windows platforms, putting users of that platform at risk. The doc file, which reaches you via malicious mail, is in RTF format. It is understood that this was generated using a tool called Royal Road. This is a phishing “weapon” believed to be used by various APT threat actors based in Asia. Also known as 8.t RTF exploit builder, Royal Road allows APT groups to create RTF files with embedded objects that can exploit vulnerabilities in Microsoft Word to infect targets.<\/p>\n
You should be careful with these types of threats as they target your information and can affect you in a big way.<\/p>\n","protected":false},"excerpt":{"rendered":"
FortiGuard has been on alert for a malware called PivNoxy which was discovered by an email which contained an RTF attachment…..<\/p>\n","protected":false},"author":1,"featured_media":4252,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10],"tags":[36],"class_list":["post-4251","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-cybersecurity"],"yoast_head":"\n