Formbook_infostealer - description

Sources:

FormBook infostealer targeting aerospace and defense industry

Malicious spam campaign distributing FormBook information stealer

FormBook is malware primarily designed to steal data. It can also download and run files from command servers and execute commands using ShellExecute. While FormBook lacks distinctive features, its availability for rent at low prices on underground forums makes it accessible to many threat actors. This accessibility makes it difficult to identify which specific cybercriminal groups are responsible for recent malicious campaigns using this information stealer. FormBook primarily targets organizations in the aerospace and defense industries.

Flowmon ADS detects network communication during both the initial infection phase and subsequent post-infection traffic.