Phishing with Microsoft Office
So far our attacks required direct interaction with the victim,
who must either download a file or visit a malicious site.
In this section, we’ll turn our attention to another commonly-exploited
client-side attack vector:
Microsoft Office applications.
Microsoft Office is a very popular software suite
used by the majority of organizations and corporations.
Due to its popularity, Office applications are a prime target for phishing
since victims tend to trust them.
Let’s explore this popular attack vector, leveraged through the
Visual Basic for Applications, embedded programming language.