Malicious Office Files Dropping Kasidet And Dridex

**Executive summary:** This report analyzes a Kasidet information-stealer campaign delivered via malicious Office documents; the variant performs POS memory scraping and browser hooking to exfiltrate credentials and payment data, includes anti-VM/Wine checks, uses hardcoded C2 URLs and custom HTTP headers with hidden commands in HTML comments, and supports plugin downloads and remote commands.