Malicious Excel Delivering Fileless Payload, (Fri, Jun 12th)

Read the original article: Malicious Excel Delivering Fileless Payload, (Fri, Jun 12th)


Macros in Office documents are so common today that my honeypots and hunting scripts catch a lot of them daily. I try to keep an eye on them because sometimes you can spot an interesting one (read: “using a less common technique”). Yesterday, I found such a sample that deserve a quick diary!


Read the original article: Malicious Excel Delivering Fileless Payload, (Fri, Jun 12th)