A new NetWire RAT variant in a recent malspam campaign that makes use of an improved keylogger and an Excel 4.0 Macro. The latest campaign targets taxpayers in hopes of snatching victims credentials and tax information. The RAT s operators swap up infection tactics to use a legacy Microsoft Excel Macro, helping them sidestep detection and analysis efforts. The payload has also been given a facelift, with better keyloggers and credential-collecting features.
Source: https://threatpost.com/taxpayers-targeted-with-improved-netwire-rat-variant/154830/