Collaborate Disseminate
When I open up my macro-enabled office files (i.e., .docm, .xlsm, .pptm) that contain signed macros as a Zip file, I see the following three files which I assume contain the digital signatures for the macro:
vbaProjectSignature.bin
vbaPro… Continue reading Parse VBA Macro Digital Signature
Now in its third year, the Close-Up Photographer of the Year competition has quickly become an impressive showcase for macro photography. Highlights in 2021 include a number of surreal shots of fungi, a stunning snap of a hornet being attacked by a swa… Continue reading The best of the 2021 Close-up Photographer of the Year Awards
I published the following diary on isc.sans.edu: “Excel Recipe: Some VBA Code with a Touch of Excel4 Macro“: Microsoft Excel supports two types of macros. The legacy format is known as “Excel4 macro” and the new (but already used for a while) is based on VBA. We already cover both
The post [SANS ISC] Excel Recipe: Some VBA Code with a Touch of Excel4 Macro appeared first on /dev/random.
Continue reading [SANS ISC] Excel Recipe: Some VBA Code with a Touch of Excel4 Macro
Having a high-quality mechanical keyboard is often a rite of passage in the computing world, with gamers and coders alike having strong opinions on the best devices. Even then, the …read more Continue reading Custom Keyboard from a Cash Register
Trying to create a phishing pretext using autoText, but when the word document is transferred to another machine, saved autoText disappears, any explanation why?
Continue reading Autotext is not being transferred with the word document [closed]
By Waqas
This means hackers are downloading/executing malicious DLLs/ZLoader without any malicious code in the spammed attachment macro.
This is a post from HackRead.com Read the original post: Hackers disabling Macro security warnings in new malspam c… Continue reading Hackers disabling Macro security warnings in new malspam campaign
Security researchers report that a notorious North Korean hacking group has been targeting engineers working in the defence industry.
Read more in my article on the Tripwire State of Security blog. Continue reading Lazarus gang targets engineers with job offers using poisoned emails
I received a malicious Word document as an attachment, and out of curiosity, I opened it with macros disabled to inspect the code. But surprisingly, there’s no code visible in the VBE editor. When I open macros dialog box with Alt + F8, I … Continue reading VBA code in malicious word document not visible in VBE editor [closed]
I published the following diary on isc.sans.edu: “Malicious PowerPoint Add-On: ‘Small Is Beautiful‘”: Yesterday I spotted a DHL-branded phishing campaign that used a PowerPoint file to compromise the victim. The malicious attachment is a PowerPoint add-in. This technique is not new, I already analyzed such a sample in a previous
The post [SANS ISC] Malicious PowerPoint Add-On: “Small Is Beautiful” appeared first on /dev/random.
Continue reading [SANS ISC] Malicious PowerPoint Add-On: “Small Is Beautiful”
I was reading a recent report about an APT and jumped into this Technique:
https://attack.mitre.org/techniques/T1203/
This technique is called:
Exploitation for Client Execution
And that might match with what a macro is. However, the des… Continue reading Why does Mitre T1203 technique includes macros as software vulnerabilities?