It’s Patch Tuesday again. Microsoft and other vendors have released their monthly updates. Among a total of 97 patched vulnerabilities there…
Tag: Office
Microsoft appears to be rolling back Office Macro blocking
We’re seeing several reports indicating that Microsoft may have rolled back its decision to block Macros in Office. Currently no official…
Retrohunting APT37: North Korean APT used VBA self decode technique to inject RokRat
This post was authored by Hossein Jazi On December 7 2020 we identified a malicious document uploaded to Virus Total which…
New Flash Player zero-day used against Russian facility
For the past couple of years, Office documents have largely replaced exploit kits as the primary malware delivery vector, giving threat…
New macro-less technique to distribute malware
One of the most common and effective infection vectors, especially for businesses, is the use of malicious Office documents. This year…
Blocks for Flash and others coming to Office 365
If you’re a user of Microsoft Office products such as Word and Excel, you’re probably aware that they’ve been used as…
Old MS Office feature weaponized in malspam attacks
Update (11-08-2017): Microsoft has issued a security advisory about DDE-based attacks and is also providing tips on how to disable that…
Fake IRS notice delivers customized spying tool
While macro-based documents and scripts make up for the majority of malspam attacks these days, we also see some campaigns that…