{"id":20881,"date":"2015-02-14T16:00:00","date_gmt":"2015-02-14T16:00:00","guid":{"rendered":"https:\/\/grapevinemsp.com\/2015\/02\/14\/macro-based-malware-has-returned\/"},"modified":"2015-02-14T16:00:00","modified_gmt":"2015-02-14T16:00:00","slug":"macro-based-malware-has-returned","status":"publish","type":"post","link":"https:\/\/grapevinemsp.com\/macro-based-malware-has-returned\/","title":{"rendered":"Macro-based Malware Has Returned"},"content":{"rendered":"

\"macro\"More than ten years ago, the most common forms of malware attacks were those that were initiated by way of macros. Macros, in case you are unaware of what they are, are little bits of VB code that are used to automate repetitive processes in applications like Microsoft Word and Excel. Back in the day, people were in the habit of setting up their own macro shortcuts and trading with others in order to realize time savings. This was the way in for hackers. They could create a macro, embed some nasty code in it, and when activated, use it to take control of a person\u2019s machine.<\/p>\n

Why They\u2019re Making A Comeback<\/strong>
\nOf course, it did not take long for the IT community to get wise to what the hacking community was doing. The IT community very quickly stamped out this form of hacking with policies that disallowed use of macros from un-trusted sources, and sometimes discouraged their use altogether. Microsoft itself got in on the act, building in a permission-based step that served as a double check. The macro would not and could not run without the user\u2019s explicit permission. This was the final nail in the coffin, as far as the hackers were concerned, and the thing that made it a non-viable form of attack. Once the macros could not be set up to run on their own, it became much harder to get users to unwittingly run them, and was essentially no longer worth the effort. The code for them, however, remained firmly in place.<\/p>\n

These days, it is the hooks provided by that code combined with a bit of social engineering that has allowed the hacking community to revisit their old stomping grounds. They now have yet another new line of attack into the systems of users around the world.<\/p>\n

The basic play occurs as follows.\u00a0The user gets a spam email, usually with the promise of some monetary gain. Coupled with this promise, there are step-by-step instructions aimed at the user that provide them with a series of explicit marching orders. People tend to naturally like systems and will follow along, not realizing that when they execute against these instructions, they\u2019re giving the malicious macro permission to run, thus once again opening the door for macros as a viable line of attack against their systems. Most often, the instructions will include a button allowing the user to \u201cenable the content\u201d that promises to help them save time, make money, or what have you. What they\u2019re actually doing, of course, is enabling the macros to install back doors into their systems.<\/p>\n

Expect that this problem will be clamped down on with the same level of ferocity that it was attacked with more than a decade ago. Because of that, this likely will not grow into an enormous problem with deep roots, but it will be small and persistent. It seems that no matter how careful we as IT professionals are, there will always be a small subset of users who will be taken in by such antics. That said, this issue is something to closely watch, but it does not constitute a four-alarm fire.<\/p>\n

Used with permission from Article Aggregator<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

More than ten years ago, the most common forms of malware attacks were those that were initiated by way of macros. Macros, in case you are unaware of what they are, are little bits of VB code that are used to automate repetitive processes in applications like Microsoft Word and Excel. Back in the day, […]<\/p>\n","protected":false},"author":5,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[],"yoast_head":"\nMacro-based Malware Has Returned<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/grapevinemsp.com\/macro-based-malware-has-returned\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Macro-based Malware Has Returned\" \/>\n<meta property=\"og:description\" content=\"More than ten years ago, the most common forms of malware attacks were those that were initiated by way of macros. Macros, in case you are unaware of what they are, are little bits of VB code that are used to automate repetitive processes in applications like Microsoft Word and Excel. Back in the day, […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/grapevinemsp.com\/macro-based-malware-has-returned\/\" \/>\n<meta property=\"og:site_name\" content=\"The Valley\u2019s Leading IT Company I Grapevine MSP\" \/>\n<meta property=\"article:published_time\" content=\"2015-02-14T16:00:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2015\/02\/macro.jpg\" \/>\n<meta name=\"author\" content=\"Cloudways\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Cloudways\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":[\"Article\",\"BlogPosting\"],\"@id\":\"https:\/\/grapevinemsp.com\/macro-based-malware-has-returned\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/grapevinemsp.com\/macro-based-malware-has-returned\/\"},\"author\":{\"name\":\"Cloudways\",\"@id\":\"https:\/\/grapevinemsp.com\/#\/schema\/person\/bd59bb9722808d3e8b3339137e9e3828\"},\"headline\":\"Macro-based Malware Has Returned\",\"datePublished\":\"2015-02-14T16:00:00+00:00\",\"dateModified\":\"2015-02-14T16:00:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/grapevinemsp.com\/macro-based-malware-has-returned\/\"},\"wordCount\":543,\"publisher\":{\"@id\":\"https:\/\/grapevinemsp.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/grapevinemsp.com\/macro-based-malware-has-returned\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2015\/02\/macro.jpg\",\"articleSection\":[\"News\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/grapevinemsp.com\/macro-based-malware-has-returned\/\",\"url\":\"https:\/\/grapevinemsp.com\/macro-based-malware-has-returned\/\",\"name\":\"Macro-based Malware Has Returned\",\"isPartOf\":{\"@id\":\"https:\/\/grapevinemsp.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/grapevinemsp.com\/macro-based-malware-has-returned\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/grapevinemsp.com\/macro-based-malware-has-returned\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2015\/02\/macro.jpg\",\"datePublished\":\"2015-02-14T16:00:00+00:00\",\"dateModified\":\"2015-02-14T16:00:00+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/grapevinemsp.com\/macro-based-malware-has-returned\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/grapevinemsp.com\/macro-based-malware-has-returned\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/grapevinemsp.com\/macro-based-malware-has-returned\/#primaryimage\",\"url\":\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2015\/02\/macro.jpg\",\"contentUrl\":\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2015\/02\/macro.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/grapevinemsp.com\/macro-based-malware-has-returned\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/grapevinemsp.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Macro-based Malware Has Returned\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/grapevinemsp.com\/#website\",\"url\":\"https:\/\/grapevinemsp.com\/\",\"name\":\"The Valley\u2019s Leading IT Company I Grapevine MSP\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/grapevinemsp.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/grapevinemsp.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/grapevinemsp.com\/#organization\",\"name\":\"Grapevine MSP\",\"url\":\"https:\/\/grapevinemsp.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/grapevinemsp.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2021\/09\/logo2850605_lg.jpg\",\"contentUrl\":\"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2021\/09\/logo2850605_lg.jpg\",\"width\":600,\"height\":159,\"caption\":\"Grapevine MSP\"},\"image\":{\"@id\":\"https:\/\/grapevinemsp.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/grapevinemsp.com\/#\/schema\/person\/bd59bb9722808d3e8b3339137e9e3828\",\"name\":\"Cloudways\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/grapevinemsp.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/9c73104e6f4801624afa01bbc4c96758?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/9c73104e6f4801624afa01bbc4c96758?s=96&d=mm&r=g\",\"caption\":\"Cloudways\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Macro-based Malware Has Returned","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/grapevinemsp.com\/macro-based-malware-has-returned\/","og_locale":"en_US","og_type":"article","og_title":"Macro-based Malware Has Returned","og_description":"More than ten years ago, the most common forms of malware attacks were those that were initiated by way of macros. Macros, in case you are unaware of what they are, are little bits of VB code that are used to automate repetitive processes in applications like Microsoft Word and Excel. Back in the day, […]","og_url":"https:\/\/grapevinemsp.com\/macro-based-malware-has-returned\/","og_site_name":"The Valley\u2019s Leading IT Company I Grapevine MSP","article_published_time":"2015-02-14T16:00:00+00:00","og_image":[{"url":"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2015\/02\/macro.jpg"}],"author":"Cloudways","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Cloudways","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":["Article","BlogPosting"],"@id":"https:\/\/grapevinemsp.com\/macro-based-malware-has-returned\/#article","isPartOf":{"@id":"https:\/\/grapevinemsp.com\/macro-based-malware-has-returned\/"},"author":{"name":"Cloudways","@id":"https:\/\/grapevinemsp.com\/#\/schema\/person\/bd59bb9722808d3e8b3339137e9e3828"},"headline":"Macro-based Malware Has Returned","datePublished":"2015-02-14T16:00:00+00:00","dateModified":"2015-02-14T16:00:00+00:00","mainEntityOfPage":{"@id":"https:\/\/grapevinemsp.com\/macro-based-malware-has-returned\/"},"wordCount":543,"publisher":{"@id":"https:\/\/grapevinemsp.com\/#organization"},"image":{"@id":"https:\/\/grapevinemsp.com\/macro-based-malware-has-returned\/#primaryimage"},"thumbnailUrl":"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2015\/02\/macro.jpg","articleSection":["News"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/grapevinemsp.com\/macro-based-malware-has-returned\/","url":"https:\/\/grapevinemsp.com\/macro-based-malware-has-returned\/","name":"Macro-based Malware Has Returned","isPartOf":{"@id":"https:\/\/grapevinemsp.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/grapevinemsp.com\/macro-based-malware-has-returned\/#primaryimage"},"image":{"@id":"https:\/\/grapevinemsp.com\/macro-based-malware-has-returned\/#primaryimage"},"thumbnailUrl":"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2015\/02\/macro.jpg","datePublished":"2015-02-14T16:00:00+00:00","dateModified":"2015-02-14T16:00:00+00:00","breadcrumb":{"@id":"https:\/\/grapevinemsp.com\/macro-based-malware-has-returned\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/grapevinemsp.com\/macro-based-malware-has-returned\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/grapevinemsp.com\/macro-based-malware-has-returned\/#primaryimage","url":"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2015\/02\/macro.jpg","contentUrl":"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2015\/02\/macro.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/grapevinemsp.com\/macro-based-malware-has-returned\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/grapevinemsp.com\/"},{"@type":"ListItem","position":2,"name":"Macro-based Malware Has Returned"}]},{"@type":"WebSite","@id":"https:\/\/grapevinemsp.com\/#website","url":"https:\/\/grapevinemsp.com\/","name":"The Valley\u2019s Leading IT Company I Grapevine MSP","description":"","publisher":{"@id":"https:\/\/grapevinemsp.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/grapevinemsp.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/grapevinemsp.com\/#organization","name":"Grapevine MSP","url":"https:\/\/grapevinemsp.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/grapevinemsp.com\/#\/schema\/logo\/image\/","url":"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2021\/09\/logo2850605_lg.jpg","contentUrl":"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2021\/09\/logo2850605_lg.jpg","width":600,"height":159,"caption":"Grapevine MSP"},"image":{"@id":"https:\/\/grapevinemsp.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/grapevinemsp.com\/#\/schema\/person\/bd59bb9722808d3e8b3339137e9e3828","name":"Cloudways","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/grapevinemsp.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/9c73104e6f4801624afa01bbc4c96758?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9c73104e6f4801624afa01bbc4c96758?s=96&d=mm&r=g","caption":"Cloudways"}}]}},"_links":{"self":[{"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/posts\/20881"}],"collection":[{"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/comments?post=20881"}],"version-history":[{"count":0,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/posts\/20881\/revisions"}],"wp:attachment":[{"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/media?parent=20881"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/categories?post=20881"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/tags?post=20881"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}