The OilRig threat group launched an attack involving the BONDUPDATER Trojan malware against a high-ranking government office in the Middle East. The threat group sent a series of spear phishing emails with a blank subject line to government workers in the region last month. Anyone who opened the attachment risked activating the latest version of the Trojan malware, which offers backdoor functionality that lets threat actors execute commands and download files on infected machines. This follows a pattern in which the threat group doesn’t always develop new tools, but simply saves development time by building on Trojan malware that’s already part of its arsenal.”]