Void Banshee

MISP
Type:
Unknown
Country:
Unknown
First seen:
Unknown
Details:

Void Banshee is an APT group targeting North America, Europe, and Southeast Asia for information theft and financial gain. They exploit vulnerabilities like CVE-2024-38112 to deliver the Atlantida info-stealer through malicious PDFs disguised as book files. The group uses internet shortcuts with MHTML protocol handlers to access and execute files through disabled Internet Explorer, posing a significant threat to organizations. Void Banshee's TTPs include crafting URL strings to control window sizes in IE and using HTML files to hide malicious downloads from victims.

Metadata
ID: 708
Created: 13/01/2026 17:48
Updated: 09/03/2026 16:00