Excel Continues to Be Used as a Lure for Online Fraud with

This updated guide examines Excel Continues to Be Used as a Lure for Online Fraud with and organizes the essential facts, background, and practical takeaways in clear American English.

The popular tools and software used by Microsoft have become the target of hackers to deploy online attacks many times. The Microsoft Security Intelligence team recently discovered a new method of fraud using Microsoft Excel documents to deceive victims.

According to findings from Microsoft Security Intelligence, TA505's new offensive campaign will send victims attachments with HTML redirection using malicious Excel documents. Through these malicious documents, the hacker attached a remote access trojan (RAT), as well as a malware downloader that distributes Dridex and Trick malware to the victim's system, targeting the data. Data, financial accounts on the system.

More dangerous, malicious Excel documents distributed by TA505 not only contain Trojans, but also attach malicious ransomware such as Locky, BitPaymer, Philadelphia, GlobeImposter, Jaff.

'TA505's new offensive campaign uses HTML redirects attached to emails. When opened, HTML led to download Dudear, an Excel file containing malicious macros into the victim's system '.

So when opening an HTML attachment, the victim will automatically download the malicious Excel file, and this is what they encountered:

After the victim clicked on Enable Editing and Enable Content as instructed in the document, they accidentally released the malware onto their system.

This malware includes GraceWire - a Trojan designed to steal information, collect sensitive information and forward data obtained via a command and control server (C2 Server).

Until this malicious campaign is stopped, the most effective preventive measure will still be refusing to open strange emails, downloading attachments as well as accessing unauthenticated links.