Although BadBbunny has not been found in the wild, a copy of the macro has found its way to security software company Sophos. The software attempts to spread itself based on the platform the application is on which includes Windows, Mac OS X and Linux.
After reviewing the code, Mark Harris, a director at Sophos Labs, noted “this particular author seems to have trouble because the sample we received didn’t work… my message to the author is, don’t bother, get a real job, but don’t bother applying to join SophosLabs. In fact, judging by the poor quality of what was submitted, I would recommend a completely different career.”
Although the application appears non-threatning it does attempt to infect other connected computers using XChat and mIRC transfers. If using OpenOffice the infection arrives as an OpenOffice Drawer file titled “badbunny.odg”.