This is the classic way a hacker gets their payload into your business – send you a spreadsheet that needs your immediate attention. Include the password in the email, this makes it more likely for you to open the file – make it look official and your cyber security threat radar is down and they are in.
Brad over on SANS Internet Storm Diary has the attack process all laid out – and shows you how the RAT gets in.
Password-protected Excel spreadsheet pushes Remcos RAT – SANS Internet Storm Centre
Further Reading
RATs at Smart Thinking Solutions!
Macros at Smart Thinking Solutions
