Office Drama on macOS - Black Hat Briefings

Office Drama

...on macOS

WHOIS

@patrickwardle

OUTLINE

history

Evil Office Docs!

analysis

exploit chain

defense

Recent History macro based attacks, targeting macOS

MACROS

...defined

tl;dr: add code to documents

Macro: "A macro is a series of commands & instructions that you group together as a single command to accomplish a task automatically" -Microsoft

+

MSOffice document + code

01 Sub AutoOpen()

02

MsgBox "Hello World!", 0, "Title"

03 End Sub

macro code (VBScript)

................
................

In order to avoid copyright disputes, this page is only a partial summary.

Google Online Preview   Download