SWEED__2020__SWEED_Targeting_Precision_Engineering_Companies_in_Italy.pdf

This report analyzes a targeted SWEED malware campaign against Italian precision-engineering firms, detailing spear-phishing with a crafted Excel document, exploitation of Microsoft Office vulnerabilities (notably CVE-2017-11882), a dropper that harvests credentials and exfiltrates data, and multiple command-and-control endpoints; it maps MITRE ATT&CK techniques and lists IoCs, suggesting attribution to the SWEED threat actor and ongoing activity.