Malicious Microsoft OneNote Attachments Distributing RATs and Malware
Cyber adversaries were found leveraging OneNote attachments to infect victims with remote access malware to harvest their credentials or even cryptocurrency wallets. Researchers spotted criminals installing malware, such as Quasar RAT, AsyncRAT, and XWorm RAT, on infected machines via OneNote files. For this infection, the computer does warn users with a pop-up.