I have written about the usefulness and the threat that Microsoft Office document macros can pose to your cyber security. This flaw, called Follina, exploits Office functionality to retrieve an HTML file, and Microsoft Support Diagnostic Tool (MSDT) to run some malicious code, which can lead to privilege escalation attacks. …
New attack using Microsoft Office documents – could you or your team recognise it?
We all send and receive Microsoft Office documents, day in and day out, using email. It is how businesses and organisations work in a Microsoft Business World – even if you have a Mac or an iPad. So any attack vector that combine a Microsoft Word document with email is …
Alleged Phishing Email Crime Boss is Caught
It is getting towards the end of the week… Hopefully this will have some impact on the amount of phishing emails and business email compromise attacks going around. Suspected phishing email crime boss arrested in Nigeria • The Register Alleged leader of Nigerian email fraud group has been captured, Interpol …
Continue reading “Alleged Phishing Email Crime Boss is Caught”
Dangerous malware – it’s only function is to deceive you into clicking something…
Getting the word out to you, about the wide range of phishing emails and their associated social engineering tricks actually active in the wild, is one of the ain reasons this blog exists. Many of our clients use this blog as a resource as a link to the multitude of …
Continue reading “Dangerous malware – it’s only function is to deceive you into clicking something…”
More on Bumblebee malware – detailed attack examination
Following the emergence of Bumblebee malware as a significant threat, SANS INternet Storm has a post looking at the function of the malware and transferring ISO files. Bumblebee Malware from TransferXL URLs – SANS Internet Storm Centre This is an excellent post by Brad and not only shows you the …
Continue reading “More on Bumblebee malware – detailed attack examination”