Cyber Threat Report: 'Winter Vivern: A Look At Re-Crafted Government MalDocs Targeting Multiple Languages'

This report by DomainTools researchers identifies a cyber threat group they call "Winter Vivern". The report describes malicious Excel macros used by the group to drop a PowerShell script to initiate command-and-control (C2) communications. The activity dates back to at least December 2020.