- Malware analysis
- 2023
OneNote attachments as a delivery vector
How attackers moved to OneNote attachments to deliver remote access trojans and infostealers after macro execution was restricted.
Attribution
Published by the Logpoint security research team, which I led.
I led the research function that produced this work. The byline is the team’s, not mine.
Analysis of the shift to OneNote attachments as a delivery mechanism for remote access trojans and infostealers, following the tightening of macro execution in Office.
The original post has not been recovered since the Guardsix rebrand.
Original link not recovered
The URL did not survive the move from Logpoint to Guardsix and has not been recovered since. Nothing has been substituted for it, so this entry stands on the record of the work rather than on a link to it.