Article Content This post was authored by Warren Mercer, Paul Rascagneres and Vitor VenturaUpdate 10/23: CCDCOE released a statement today on their websiteIntroductionCisco Talos discovered a new malicious campaign from the well known actor Group 74 (aka Tsar Team, Sofacy, APT28, Fancy Bear…) Ironically the decoy document is a deceptive flyer relating to the Cyber Conflict U.S conference CyCon US is a collaborative effort between the Army Cyber Institute at the United States Military Academy and the NATO Cooperative Cyber Military Academy and the NATO Cooperative Cyber Defence Centre of Excellence Due to the nature of this document, we assume that this campaign targets people with an interest in cyber security Unlike previous campaigns from this actor, the flyer does not contain an Office exploit or a 0-day, it simply contains a malicious Visual Basic for Applications (VBA) macro.The VBA drops and executes a new variant of Seduploader This reconnaissance malware has been used by Group 74 for years and it is composed of 2 files: a dropper and a payload The dropper and the payload are quite similar to the previous versions but the author modified some public information such as MUTEX name, obfuscation keys.
Below is an instruction that describes a task, paired with an input that provides further context. Write a response that appropriately completes the request. ### Instruction: List the MITRE techniques contained in the text. ### Input: Article Content This post was authored by Warren Mercer, Paul Rascagneres and Vitor VenturaUpdate 10/23: CCDCOE released a statement today on their websiteIntroductionCisco Talos discovered a new malicious campaign from the well known actor Group 74 (aka Tsar Team, Sofacy, APT28, Fancy Bear…) Ironically the decoy document is a deceptive flyer relating to the Cyber Conflict U.S conference CyCon US is a collaborative effort between the Army Cyber Institute at the United States Military Academy and the NATO Cooperative Cyber Military Academy and the NATO Cooperative Cyber Defence Centre of Excellence Due to the nature of this document, we assume that this campaign targets people with an interest in cyber security Unlike previous campaigns from this actor, the flyer does not contain an Office exploit or a 0-day, it simply contains a malicious Visual Basic for Applications (VBA) macro.The VBA drops and executes a new variant of Seduploader This reconnaissance malware has been used by Group 74 for years and it is composed of 2 files: a dropper and a payload The dropper and the payload are quite similar to the previous versions but the author modified some public information such as MUTEX name, obfuscation keys. ### Response: .