Attackers Slipping Past Corporate Defenses with Macros and Cloud Hosting

From Cisco Security Blog:


Attackers Slipping Past Corporate Defenses with Macros and Cloud Hosting


Macro malware is a good example of malware writers and distributors using old tricks that most users have forgotten to spread malware. Unlike earlier macro malware, these macros don’t infect other documents but download password stealing trojans and install them on targets. Macro malware typically arrives via email with an attachment that contains a macro-based phishing attack in the form of an MS Office document (usually Word or Excel). The malicious code is written using the older Visual Basic for Applications (VBA) scripting language.