30
Novel phising campaign uses corrupted Word documents to evade security
(www.bleepingcomputer.com)
They’ve been doing this since the 90s, so…
this post was submitted on 02 Dec 2024
30 points (100.0% liked)
Cybersecurity
5922 readers
289 users here now
c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.
THE RULES
Instance Rules
- Be respectful. Everyone should feel welcome here.
- No bigotry - including racism, sexism, ableism, homophobia, transphobia, or xenophobia.
- No Ads / Spamming.
- No pornography.
Community Rules
- Idk, keep it semi-professional?
- Nothing illegal. We're all ethical here.
- Rules will be added/redefined as necessary.
If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.
Learn about hacking
Other security-related communities [email protected] [email protected] [email protected] [email protected] [email protected]
Notable mention to [email protected]
founded 2 years ago
MODERATORS
Tl;dr... A quishing attack, hidden inside docx files that are just corrupt enough to evade automatic scanners, but not so corrupted that they're not easily recoverable.
Same tactic as the 90s macro enabled ones, but instead of a macro, it's a phishing qr code.