Malware
OWOWA
- First Reported
- Sep 29, 2025
- Latest Reported
- Dec 10, 2025
Reported Context (2)
- we also identified a malicious IIS module designed to steal Outlook on the web users' credentials. The OWOWA module is installed on a web server and monitors HTTP requests and responses on the Outlook sign-in page. APT31 Targeted Russian IT Firms With New Malware and Cloud-Based C2
- The attackers used known tools such as Powertaskel and owowa. We also identified new tools: the BindSycler and DQuic traffic tunneling tools and a new Mythic agent. Researchers Detail Goffee’s Malware and Stealthy Attacks on Russian Organizations
CVE (2)
Malware (14)
People (3)
Threat Actors (3)
MITRE ATT&CK (57)
Vendors (3)
Products (12)
Tools (28)
Industries (2)
Countries (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.