[clamav-users] Encrypted Word doc/phishing attack

Steve Basford steveb_clamav at sanesecurity.com
Wed Oct 5 09:13:14 EDT 2016

On Wed, October 5, 2016 1:21 pm, Alex wrote:
> Hi,
> I'm starting to receive emails like this:
> http://pastebin.com/HpvEcT9K
> They're not being caught by clamav or other virus filters. Is it even
> possible to catch encrypted Word docs with a virus scanner?
Sorry this is brief, still generating sigs but...

badmacro.ndb: Sanesecurity.Badmacro.Doc.CryptDoc.v1 now detecting them.


Twitter: @sanesecurity

More information about the clamav-users mailing list