[SANS ISC] Obfuscated with a Simple 0x0A

I published the following diary on isc.sans.edu: “Obfuscated with a Simple 0x0A“:

With the current Coronavirus pandemic, we continue to see more and more malicious activity around this topic. Today, we got a report from a reader who found a nice malicious Word document part of a Coronavirus phishing campaign. I don’t know how the URL was distributed (probably via email) but the landing page is fake White House-themed page. So, probably targeting US citizens… [Read more]