Files packaged with Excel-DNA from which a dll containing 2 urls pointing to Discord is extracted. These download data files and encode them with XOR creating additional DLLs, which initiate the malware infection.
HTS launches a maxi hunt against rival militias in Idlib. The excuse is an “anti-terrorism” operation in Harem, Salqin, Jisr al-Shughur, al-Dana, Idlib city and other locations in the Syrian province. In a few days there have been dozens of arrests
New “anti-terrorism” operation by Hayat Tahrir al-Sham (HTS) in Idlib. The Qaedist group, an ally of Turkey, has launched a series of maneuvers in Harem, Salqin, Jisr al-Shughur, al-Dana, Idlib city and other cities of the Syrian province, carrying out numerous arrests. Formally these are people accused of supporting the Damascus regime. In fact, according to local sources, they are members of competing militias (mainly Hurras al-Din) and local opposition groups. Not surprisingly, HTS has set up checkpoints at the gates of cities and on main roads. In addition, local civilians and their vehicles are carefully searched. The formation, in fact, wants to interrupt the growing trend of attacks suffered by rivals. These have in fact begun to strike the group systematically and do not show any sign of reducing the pressure.