Netskope Threat Labs

PPDropper

ATP Sandbox Adv. Heuristics

This generic detection identifies presentation documents that drop additional malware payloads when opened.

First seen
January 2022
Last seen
September 2026
Alert Name
Document-Office.Trojan.PPDropper
Document-PowerPoint.Trojan.PPDropper
Script-PowerShell.Trojan.PPDropper