The email false xlsx points to a fake site with a zip document. This contains a VBS with a powershell which downloads the malware. C2 is the same as RemcosRAT.
Syria is divided on post-ISIS management: in the north, between Hama and Idlib, there is fighting. In the East, instead, reconstruction has begun. In Raqqa the rebuild of the Church of the Martyrs is underway, while in Deir Ezzor and Hasakah the streets are being rebuilt while the SDF are hunting the Islamic State
Syria is divided on post-ISIS management. While in the north (between Hama and Idlib) clashes continue between the troops of Damascus (SAA) and the anti-government militias, reconstruction began in the east. In Raqqa the rebuild of the first Christian church of the city, that of the Martyrs, is underway. In Deir Ezzor and Hasakah the bulldozers operate every day to remove the rubble in some towns and roads are being restored. In parallel, Jazeera Storm’s SDF continue to hunt Islamic State cells in the quadrant. Especially between Busayrah, Dhiban and Shahil. These are the first areas that the Daesh militiamen reach after having infiltrated from the west through the Euphrates. In addition, the networks of facilitators that support and finance their trips as well as terrorist attacks there.
The situation continues to deteriorate between Hama and Idlib: the Syrian army (SAA) conquers Khan Sheikhoun, but bombs a Turkish convoy bound for Morek. Rising insecurity is benefiting Daesh, now considered a secondary target, who has resumed his head
In the north of Syria, however, the situation is different. Although Isis has been virtually defeated, insecurity and violence remain. Between Hama and Idlib, the SAA carries out its offensive against anti-government militias, both with a violent air campaign and with troop maneuvers on the ground. In the last few hours the army of Damascus has conquered Khan Sheikhoun, driving out the forces of the Al-Fatah Al-Mubin Operations Room coalition. Furthermore, a Turkish convoy heading for the Morek observation point, was attacked. This situation favors the return and expansion of the Islamic State, currently considered a second-rate target in the country. The Daesh jihadists, still present in some areas controlled by the SAA, have recently raised their heads increasing the blitz against the soldiers. This is unlike the East, where the security mechanism set by the SDF has drastically reduced their operational capacity.