The “FLEXOCIT ORDINE_N.202309028” email baits Formbook in Italy. Cybersecurity researcher and malware hunter, JAMESWT: The img attachment contains an exe file: the malware

“FLEXOCIT ORDINE_N.202309028” is the subject of an email, which conveys a new Formbook campaign in Italy. This was discovered by cybersecurity researcher and malware hunter, JAMESWT.

The img attachment contains an exe file: the malware.

Formbook, through the keylogger function, is able to acquire everything that the user types. Furthermore, it can steal email and browser credentials as well as take screenshots. Finally, it has the ability to remotely issue commands to the infected PC, such as downloading additional payloads or updating existing ones.