Dr Josh Stroschein, VDA Labs, Author at Security Boulevard

Deeper Down the Rabbit Hole: Second-Stage Attack and a Fileless Finale

Dr Josh Stroschein, VDA Labs | November 5, 2018 | analysis, Bromium Threat Labs, Data Talks, Malware, office, threat report, threats, word

In our last blog, “Following a Trail of Confusion: PowerShell in Malicious Office Documents”, we systematically unraveled multiple layers of obfuscation initiated by a weaponized first-stage Microsoft Word document to reveal a surreptitious download script and a malicious second-stage binary file dropped onto the victim PC. For those who wish ... Read More

Bromium

Following a Trail of Confusion: PowerShell in Malicious Office Documents

Dr Josh Stroschein, VDA Labs | October 2, 2018 | analysis, Bromium Threat Labs, Data Talks, Malware, powershell, threat report, threats

While the threat landscape continues to evolve, Microsoft Office documents continue to see steady usage by malicious actors. These documents, often times equipped with nothing more than the built-in capability offered by the macros, are continuously leveraged to gain a foothold into the enterprise. And why shouldn’t they? Macros provide ... Read More

Bromium