Skip to main content

InQuest Flash Alerts

Posted on 2020-05-18 by William MacArthur
We wanted to go through and release some of the more interesting examples that we are running into regarding the era of the hidden (very hidden) documents, which we will publish in more flash reports and tweets going forward. .
Posted on 2020-05-12 by William MacArthur
I see some great things happening and people noticing some of the Documents that are going around that have some ties to what I call it as Evloution4 based on the chracteristics we have observed. We are following the evolutions (changes) and other TTPS that we have observed since we started to track heavily.
Posted on 2020-05-11 by William MacArthur
Dridex XLSM Documents using 4.0 Macrosheets and bypassing vendors today. The XLSM 4.0 Macrosheets technique can be further reviewed from our blog post from last week:: ZLoader 4.0 Macrosheets Evolution
Posted on 2020-04-27 by William MacArthur
Ongoing Encrypted #Gozi/#Ursnif XLS Documents with 0 VT hits for a #Medicare targeted campaign. This also has a very interesting Sha256 letting us know it's "BAD" before we even look at it!