Operators of the Bumblebee malware loader have launched a new campaign involving the exploitation of 4shared Web Distributed Authoring and Versioning services following a two-month hiatus, according to BleepingComputer. Malspam emails purporting to be invoices, scans, and notifications that mostly include Windows LNK files have been leveraged by attackers to facilitate the campaign, with the LNK file triggering a series of commands beginning with the mounting of a WebDAV folder on a network drive of the targeted machine, a report from Intel471 revealed.

Source: SC Magazine