UNG002 Deeply Nested Metadata VBScript Execution
Detects UNG002's tactic of hiding malicious VBScripts 4+ levels deep in folders mimicking macOS metadata (__MACOSX) to evade automated scanners.
YARA-L
Detects UNG002's tactic of hiding malicious VBScripts 4+ levels deep in folders mimicking macOS metadata (__MACOSX) to evade automated scanners.
Already have an account?