Netskope Threat Labs

ALight

ATP Sandbox Adv. HeuristicsAV

ALight is a downloader and exploit that targets Microsoft Excel documents to deliver additional malware payloads through formula injection.

First seen
May 2022
Last seen
October 2026
Alert Name
Document-Excel.Downloader.ALight
Document-Excel.Exploit.ALight
Document-Excel.Malware.ALight
Document-Excel.Trojan.ALight
XF:ALight.25
XF:ALight.27
XF:ALight.3
XF:ALight.45
XF:ALight.47
XF:ALight.51