News and Analysis

A new phishing campaign is delivering a backdoor written in the Nim programming language using decoy Microsoft Word documents. It appears that malware written in uncommon languages can put the security community at a disadvantage due to unfamiliarity with the language. This new tactic can make investigation and reverse engineering difficult. This attack begins with a phishing email containing a Word document, which when opened urges the recipient to enable macros to activate the malware deployment.