At CYFIRMA, we continuously analyze the tactics and techniques employed by threat actors. One such technique is Remote Template Injection, which exploits Microsoft Word's template functionality to bypass traditional defenses. Used by Advanced Persistent Threat (APT) groups, this method disguises malicious payloads in seemingly harmless documents, making it a potent tool in spear-phishing campaigns.
Our latest report uncovers how attackers exploit Word’s XML-based OOXML format to inject malicious templates, bypassing email filters and endpoint detection. We detail the technical execution, risks, and mitigation strategies.
Link to the Research Report: https://www.cyfirma.com/research/noneclid-rat/
Stay informed, stay secure. Read the full report to protect against this sophisticated threat!

https://www.cyfirma.com/