Malspam Campaigns Using IQY Attachments to Bypass AV Filters and Install RATs

Malspam campaigns, such as ones being distributed by Necurs, are utilizing a new attachment type that is doing a good job in bypassing antivirus and mail filters.  These IQY attachments are called Excel Web Query files and when opened will attempt to pull data from external sources. 

Read More