silversurfer
Level 85
Thread author
Verified
Honorary Member
Top Poster
Content Creator
Malware Hunter
Well-known
- Aug 17, 2014
- 10,057
Threat actors are increasingly adopting Excel 4.0 documents as an initial stage vector to distribute malware such as ZLoader and Quakbot, according to new research.
The findings come from an analysis of 160,000 Excel 4.0 documents between November 2020 and March 2021, out of which more than 90% were classified as malicious or suspicious.
"The biggest risk for the targeted companies and individuals is the fact that security solutions still have a lot of problems with detecting malicious Excel 4.0 documents, making most of these slip by conventional signature based detections and analyst written YARA rules," researchers from ReversingLabs said in a report published today.
![thehackernews.com](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjDOxr4M8WXUVyMug581NNqJ8Yz61Td0B24vINqqsZMvXkuGefyTq-k4kDVO7W-jHbrXHjjkA119TdJlCadlcx7nJKQnDXCwVnIFbf8Ul3yAiHHk9RvQhzdukulzvw-rI248KodxaNMOTo/s0/malware.jpg)
Cybercriminals Widely Abusing Excel 4.0 Macro to Distribute Malware
The Excel 4.0 Macro is being heavily exploited by cybercriminals to distribute malware.
![thehackernews.com](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQQyjwPYjJP0wddSEB8Dlpr3dlnQUs52-WmlrZfqJoBPeOvv2Zoqlq-FhEAz_Xeprj_mtrI1MGCW1JS840JUjVEK6VoNe6zCNNTw_7YmyvNmf3E5pprZ3zqP8lszq74Wt97SvbJo5yeuyep0U6-nGs0vdarg4_WUrc5r6L0ML0xE-BsPipJd2-1PMHTvO1/s32-rw-e365/thn.jpg)