Malicious Microsoft Word documents to facilitate the distribution of Nim-based malware, which has only recently gained traction with the emergence of the Nimbda and NimzaLoader malware loaders, according to The Hacker News. Threat actors impersonate a Nepali government official in phishing emails that include the decoy Word document, which when executed triggers analysis tool scanning before proceeding to either self-termination or connection with a remote server masquerading a Nepal government domain, a Netskope report revealed.

Source: SC Magazine