Cybercriminal gangs are using a newly discovered malicious document builder called “EtterSilent” The document builder allows attackers to create differentiated, hard-to-discover, malicious documents that can be deployed in phishing attacks. It’s being used by several cybercrime groups, which Intel 471 did not name, to create malicious documents used to deliver a wide variety of malware, including the Trickbot banking Trojan. In both cases, the fake Office product is disguised as a DocuSign document.”]

