This phishing email containing a Word document that has a macro set up to communicate with the outside world, as shown below.


The word document, please note this is presented for visibility – do not open the document on your computer!


When the content is enabled – macros are able to be run – the document will then start communicating with the outside world. In this instance it fails, as the network connection was removed so the communication process could not occur.


Below are the macros that are contained within the document, they are password protected so the content is not immediately visible.


Leave a Reply

Your email address will not be published. Required fields are marked *