Carl Maverick Pascual

AutoIt-Compiled Worm Sends Fileless BLADABINDI/njRAT

BLADABINDI’s customizability and seeming availability in the underground make it a prevalent threat. Last week, we came across a worm (Worm.Win32.BLADABINDI.AA) that propagates through removable drives and installs a fileless version of BLADABINDI.

Carl Maverick Pascual, Michael Jhon Ofiaza, Patrick Angelo Roderno