Phish-FinalAlert-18feb15

This phishing email containing a Word document that has a macro set up to communicate with the outside world, as shown below.

2015-02-18-1119

The word document, please note this is presented for visibility – do not open the document on your computer!

2015-02-18-1119-1

When the content is enabled – macros are able to be run – the document will then start communicating with the outside world. In this instance it fails, as the network connection was removed so the communication process could not occur.

2015-02-18-1119-2

Below are the macros that are contained within the document, they are password protected so the content is not immediately visible.

2015-02-18-1119-3

Leave a Reply

Your email address will not be published. Required fields are marked *