Two months after .NET 10.0, Microsoft starts preview series for version 11, primarily with innovations in the web frontend ...
The campaign exploits an Office vulnerability to deliver the modular XWorm RAT, chaining HTA, PowerShell, and in-memory .NET execution to sidestep detection and expand post-compromise control.