Paper Werewolf spying attacks use Microsoft Word docs
With at least seven observed campaigns under its belt since 2022, threat intelligence analysts have now reported a surge in the activity of the Paper Werewolf cluster, also known as GOFFEE, which uses infected Microsoft Windows Word documents to launch mostly espionage-driven, credential-compromising attacks.
The Paper Werewolf Windows Attacks
The threat intelligence team at BI.ZONE, which works in cooperation with Interpol and is an International Committee of the Red Cross global advisory board member, said in a Dec. 25 technical report that it has “recorded a surge in the activity of the Paper Werewolf” attack…