Nercus Botnet .IQY files
-
Found this while trying to pinpoint a weird attachment (.iqy file) a customer of mine received:
https://myonlinesecurity.co.uk/necurs-delivering-flawed-ammy-rat-via-iqy-excel-web-query-files/
http://www.malware-traffic-analysis.net/2018/05/25/index.htmlJust in case you don't have that attachment type blocked in Excel or Spam filtering.