April 07, 2020 6 Min read

New Ursnif Campaign: A Shift from PowerShell to Mshta

Recently, the Zscaler ThreatLabz team saw the start of a campaign featuring a new multistage payload distribution technique for the well-known banking Trojan named Ursnif (aka Gozi aka Dreambot). The malware has been aro...