Malware attack after mouse movement in PowerPoint presentation
A PowerPoint document in presentation mode performs a cyber attack after the first mouse movement. A PowerShell script then strikes and runs the Graphite malware. APT28, also known as Fancy Bear, is said to be behind the attack. Cluster25 researchers collected and analyzed a malicious document that was used to implant a variant of the Graphite malware clearly associated with the threat actor known as APT28 (aka Fancy Bear, TSAR Team). This is an APT group attributed to the Chief Intelligence Directorate of Russia of the Russian General Staff by a July 2018 US Department of Justice indictment. That…