ThreadKit

The exploit kit is used to create malicious Microsoft Office documents in order to exploit a series of Microsoft vulnerabilities. The builder is sold on the Dark Web and has been used to infect victims with a variety of malware, including FormBook, Loki Bot, Trickbot and Chthonic.