Intel Name: Potential kamikakabot activity – lure document execution
Date of Scan: February 12, 2025
Impact: Medium
Summary: Detects the execution of a Word document through the WinWord Start Menu shortcut. This technique has been observed in KamiKakaBot samples to trigger the second stage of infection.
