test_blackberry

BlackBerry Research & Intelligence describes "AeroBlade", a previously undocumented threat actor that used targeted spear-phishing with weaponized Word documents to deploy an obfuscated DLL reverse shell against a U.S. aerospace firm; the malware includes persistence via Task Scheduler, anti-analysis protections, AES-encrypted static config pointing to hard-coded C2 over port 443, and capabilities for remote command execution and directory listing, and the report provides technical analysis, MITRE ATT&CK mapping, and IoCs indicating likely commercial cyber espionage.