Incidents

Avarta – an MS Publisher virus

The spring seems to be a prolific time for new ideas and proof of concept viruses. However, not all of them are a cause for concern.

For instance, we’ve received a new virus which infects Microsoft Publisher (*.pub) documents. You can find a description of Avarta here.

Due to its crude replication method and obvious payload, Avarta has zero chances of getting in the wild. Three or four years ago, this might have been an innovative piece of malware. But now macroviruses are virtually extinct, making Avarta proof of concept for something that will never become a threat.

Avarta – an MS Publisher virus

Your email address will not be published. Required fields are marked *

 

Reports

APT trends report Q3 2022

This is our latest summary of advanced persistent threat (APT) activities, focusing on events that we observed during Q3 2022.

APT10: Tracking down LODEINFO 2022, part I

The first part of this report will provide technical analysis of the new infection methods such as SFX files and DOWNIISSA, a new downloader shellcode used to deploy the LODEINFO backdoor.

Subscribe to our weekly e-mails

The hottest research right in your inbox