FROM A TEAMS CALL TO A RANSOMWARE THREAT: MATANBUCHUS 3.0 MAAS LEVELS UP

Summary from the TLDR InfoSec newsletter

Matanbuchus, a Malware-as-a-Service (MaaS) loader that has been active since 2021, has evolved to version 3.0 with enhanced capabilities. Recent campaigns have used Microsoft Teams impersonation and Quick Assist for deployment. Updates include improved communication protocols, in-memory stealth, enhanced obfuscation, indirect system calls, broader execution support, and enriched data collection targeting EDR controls.