Formbook from fake order via complicated chain using multiple equation editor exploits

Another Formbook campaign this morning using a somewhat complicated and devious chain to get on the victim’s computer. It all starts with a very basic & simple email that pretends to be an order but contains what appear to be a set of previous emails between the 2 parties, which is all fake. They are using email addresses and subjects that will scare orĀ entice a user to read the email and open the attachment. A very high proportion are being targeted at small and medium size businesses, with the hope of getting a better response than they do from consumers. Continue reading →