neonprimetime security , just trying to help

This malicious email contained a microsoft word attachment with VB code in it. Here is a link to the full original macro code . SUBJECT: ...

I recently saw an email in French that was phishing a user to click on an invoice. The email looked like this below (I attempted to google ...

Here's a quick run-down of how I manually de-Obfuscated a URL from Evil VBA Macro. First I was looking at this evil VBA Macro , but it...

I hope you're enjoying following my ride along as I learn sometimes new things, sometimes simpler better more efficient ways to do thing...

I posted an obfuscated malicious VBA script for in a Word Document that was disguised as a Resume in a phishing email. It was obfuscated m...

I pasted some details about a Phishing email that I saw containing a Resume in a Microsoft Word document. If users clicked on the word doc...

I recently blogged about attackers using the auto-close method in Microsoft Word VBA for attacks . Today I pasted a sample of a malicious...

Threatpost recently told us that the Dridex Malware has been seen using the AutoClose method in VBA . First: What is the AutoClose functi...

There are a few tools out there that extract Macros out of Microsoft Office Documents. I thought I'd walk through and example of how. ...

There was this phishy email From: Forrest Chavez Carmella.7b@lepau.com Subject: Outstanding invoices - 122680 January Attachmen...