A widespread fileless malware campaign called Astaroth with the “lived off the land” method to attack Windows users with advanced persistent technique to evade the detection. Microsoft spotted this fileless malware using anomaly detection algorithm and the observation by a sudden spike in the use of Windows Management Instrumentation Command-line (WMIC) tool to run the malicious script.

Read full article on GBHackers