From en.secnews.gr
Microsoft security team announced yesterday it has discovered one line malwarecampaigns that distribute Astaroth malware using “fileless” and “living-off-the-land” techniques. These techniques are preferred by them hackers because it is very difficult to detect them from traditional antivirus programs.
Attacks have been identified by the group behind Windows Defender ATP.
One of the team members said Microsoft was worried when it noticed a huge and sudden rise in the use of the Windows Management Instrumentation Command (WMIC) tool.