Having tracked the activities of threat actors suspected of being involved in a large number of malicious spam attacks targeting organizations based in Turkey, Sophos researchers determined that the attackers flew under the radar using Excel formula injections to deliver the payload. “The threat actor predominantly targets victims based in Turkey using malspam email messages written in the Turkish language.

Read full article on Infosecurity