Google Sheets Gone Rogue: New Malware Campaign Targets 70+ Organizations

Cybersecurity researchers have uncovered a novel malware campaign leveraging Google Sheets as a command-and-control mechanism. They named the bespoke tool Voldemort, which impersonates tax authorities to target over 70 organizations worldwide. This unusual campaign has mixed advanced techniques with basic tricks, making it difficult to assess the threat actors’ capabilities.

Pro Dashboard

Hot Take:

Looks like Voldemort has ditched Hogwarts for Google Sheets, and he’s targeting more than just wizards—insurance companies and tax authorities beware! If only Dumbledore had invested in cybersecurity…

Key Points:

  • Malware campaign uses Google Sheets for command-and-control (C2) operations.
  • Targets include over 70 organizations in various sectors globally.
  • Emails impersonate tax authorities to distribute malware.
  • The malware, dubbed Voldemort, utilizes complex techniques to avoid detection.
  • Proofpoint describes the activity as a blend of APT and cybercrime strategies.

Membership Required

 You must be a member to access this content.

View Membership Levels
Already a member? Log in here
The Nimble Nerd
Confessional Booth of Our Digital Sins

Okay, deep breath, let's get this over with. In the grand act of digital self-sabotage, we've littered this site with cookies. Yep, we did that. Why? So your highness can have a 'premium' experience or whatever. These traitorous cookies hide in your browser, eagerly waiting to welcome you back like a guilty dog that's just chewed your favorite shoe. And, if that's not enough, they also tattle on which parts of our sad little corner of the web you obsess over. Feels dirty, doesn't it?