You are viewing a plain text version of this content. The canonical link for it is here.

Posted to users@spamassassin.apache.org by Alex <my...@gmail.com> on 2018/11/16 18:11:00 UTC

Macros now replaced by XML

Hi,

It seems spammers are now using XML Word documents instead of ones
containing macro viruses. Virtually no antivirus scanners are catching
this now.

These are hacked Outlook accounts sending virus/phish attachments.

https://pastebin.com/8QxujfAt

Re: Macros now replaced by XML

Posted by Giovanni Bechis <gi...@paclan.it>.

On 11/16/18 7:11 PM, Alex wrote:
> Hi,
> 
> It seems spammers are now using XML Word documents instead of ones
> containing macro viruses. Virtually no antivirus scanners are catching
> this now.
> 
> These are hacked Outlook accounts sending virus/phish attachments.
> 
> https://pastebin.com/8QxujfAt
> 
New OLEMacro plugin just committed catches it.
 Cheers
  Giovanni