NICECURL is a VBScript-based backdoor used by APT42 to download additional modules.
Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.