DanaBot Trojan first targeting organizations in Australia earlier this year has expanded into Europe and now is aiming at US. DanaBot is written in Delphi and includes the loader, main component that downloads, configures and loads modules. On September 26, a campaign in the US was seen using an eFax in email messages as the lure for victims. It contained a URL that led to the downloading of a document that contained malicious macros that, if enabled by the user, put the embedded Hancitor malware into play.”]