Threat Hunt: Potential APT28 NotDoor VBA Outlook Backdoor Activity

frog 🐸@frog

•updated Sep 4, 2025•2•6•118

Looking for several activities that are documented as being part of the initial infection chain for NotDoor (https://lab52.io/blog/analyzing-notdoor-inside-apt28s-expanding-arsenal/). Nice as a quick historical check for any potentially interesting things to investigate further.