Distribution
How XWorm Infects Computers
Documented XWorm distribution methods organized by delivery theme and format. Not all formats apply to every campaign.
AUTHOR: Threat Intelligence Research TeamUPDATED: 2026-10-04VERIFIED: 2026-10-04
Phishing email themes
InvoiceRequest for quotationPurchase orderTax correspondenceBanking informationShippingPayment notificationsBusiness documents
Attachment / delivery formats
PDFsOffice documentsRTFExcelXLAMZIP / archive filesLNK shortcutsURL filesHTMLJavaScriptVBSScript-based loaders
Do not overgeneralize
Do not imply all formats apply to every campaign. Delivery chains are campaign-specific.
