A curious case of a threat actor at the border between crimeware and cyberespionage

ESET released an analysis of the Asylum Ambuscade crimeware group that has been active since at least early 2020.

This group targets bank customers and cryptocurrency traders in regions including North America and Europe.

The TTP’s related to initial access include spearphising emails containing malicious XLS and DOC files.