[clamav-users] Encrypted Word doc/phishing attack

Steve Basford steveb_clamav at sanesecurity.com
Wed Oct 5 09:13:14 EDT 2016


On Wed, October 5, 2016 1:21 pm, Alex wrote:
> Hi,
> I'm starting to receive emails like this:
>
>
> http://pastebin.com/HpvEcT9K
>
>
> They're not being caught by clamav or other virus filters. Is it even
> possible to catch encrypted Word docs with a virus scanner?
>
Sorry this is brief, still generating sigs but...

badmacro.ndb: Sanesecurity.Badmacro.Doc.CryptDoc.v1 now detecting them.

-- 
Cheers,

Steve
Twitter: @sanesecurity




More information about the clamav-users mailing list