Old, but New – An Analysis of Recent VBA Macros | Fortinet Blog

In early November, we experienced an influx of Microsoft Word documents that contained malicious macros. Just when the computer security industry was on the verge of forgetting these oldies, they rose to life once again, proving that they’re not allowing themselves to be eliminated that easily.

In June, Ruhai Zhang warned of macro threats that continue to spread, particularly those that use Microsoft Excel. In this blog post, I will go over a family of Microsoft Word macros, detected as WM/Agent!tr, that I have encountered in the past couple of months. Here we will see how simple they are in nature while they strive hard to disguise their destructive parts.

Old, but New – An Analysis of Recent VBA Macros | Fortinet Blog