SmokeLoader Malware Exploits MS Office Bugs to Target Taiwanese Firms

The SmokeLoader malware has resurfaced, targeting manufacturing, healthcare, and IT sectors in Taiwan. Known for its modular design and evasion techniques, SmokeLoader is being distributed via phishing emails exploiting old security flaws. It acts as a downloader and can execute attacks by downloading plugins from its command-and-control server. Despite a decline in activity following a Europol-led crackdown, SmokeLoader remains active due to cracked versions available online, continuing to pose a threat by stealing data and launching attacks.