Leveraging Microsoft Office Documents to Deliver Agent Tesla and njRat

Fortinet researchers found some malicious Microsoft Office documents that attempted to leverage legitimate websites—MediaFire and Blogger—to execute a shell script and then dropped two malware variants of Agent Tesla and njRat.