Cyber Threat Report: 'This isn't Optimus Prime's Bumblebee but it's Still Transforming'

Since March 2022, Proofpoint observed a malicious email campaign delivering the Bumblebee downloader. Multiple groups have been observed utilising Bumblebee, including TA579 who Proofpoint observed delivering Bumblebee as part of a DocuSign themed campaign. The report includes technical analysis of the C++ Bumblebee downloader.