value:  KeyBoy uses the Dynamic Data Exchange (DDE) protocol to download remote payloads. ;; MuddyWater has used malware that can execute PowerShell scripts via DDE. ;; Patchwork leveraged the DDE protocol to deliver their malware. ;; PoetRAT was delivered with documents using DDE to execute malicious code. ;; POWERSTATS can use DDE to execute additional payloads on compromised hosts. ;; Ramsay has been delivered using OLE objects in malicious documents. ;; RTM can search for specific strings within browser tabs using a Dynamic Data Exchange mechanism. ;; Sharpshooter has sent malicious Word OLE documents to victims. ;; Sidewinder has used the ActiveXObject utility to create OLE objects to obtain execution through Internet Explorer. ;; TA505 has leveraged malicious Word documents that abused DDE. ;; Valak can execute tasks via OLE.
name: Inter