The Botnet appears to use a new delivery method for compromising Windows systems after Microsoft disables VBA macros by default.
Source: threatpost.com – Read more

New T1555.003 Technique Let Attackers Steal Passwords From Web Browsers
The T1555.003 technique, highlighted in the MITRE ATT&CK framework, allows attackers to extract saved usernames and passwords from web browsers, leading to unauthorized access and