Technical analysis by the Malware Hunter JAMESWT

FYI ! Attention! Campaign spreads Agent Tesla. The exe attachment is the malware itself and if opened it activates the chain of infection. Stolen information is exfiltrated via smtp

“FYI! Attention!” is the subject of an email, exploited in the latest Agent Tesla campaign.

The exe attachment is the malware itself and, if opened, activates the chain of infection. Once inside the victim’s computer, it steals information and exfilters it via smtp.

Agent Tesla, in fact, through the keylogger function, is able to acquire everything the user types. Furthermore, it can steal browser emails and credentials and take screenshots. Finally, it has the ability to remotely issue commands on the infected PC, such as downloading additional payloads or updating existing ones.

Malware family attribution