Ukraine Warns of Weaponized XLL Files Delivering CABINETRAT Malware via Zip Archives

Ukraine’s national cyber incident response team, CERT-UA, has issued an urgent warning about a new malware campaign that weaponizes Excel add-in (XLL) files to deploy the CABINETRAT backdoor. Throughout September 2025, CERT-UA analysts discovered multiple malicious XLL files masquerading as benign documents, including “Звернення УБД.xll” and “recept_ruslana_nekitenko.xll,” which exploit Excel’s Add-in Manager and the xlAutoOpen […]

The post Ukraine Warns of Weaponized XLL Files Delivering CABINETRAT Malware via Zip Archives appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.