Blogspot-Hosted Payloads Delivered in ‘Veil#Drop’ Attacks

Securonix has identified a sophisticated framework known as Veil#Drop that uses various techniques to evade detection. This framework abuses compromised websites and Blogspot to deliver payloads. It also utilizes PowerShell and fileless techniques to remain stealthy. The ultimate goal of Veil#Drop attacks is to deploy the PureLog information stealer. The attacks leverage a combination of these methods to avoid being detected.