Mimecast shows yet another way to zap systems using Excel’s Power Query feature

Topic

New Reply

Early this morning, email security company Mimecast released a report detailing how malicious folks can attack by abusing the Excel feature called Pow
[See the full post at: Mimecast shows yet another way to zap systems using Excel’s Power Query feature]

Reply | Quote

Replies

Here’s another one involving Excel Macros  https://www.scmagazine.com/home/security-news/malware/microsofts-familiar-refrain-disable-macros-to-avoid-malware-campaign-running-flawedammyy-trojan/

Reply | Quote

When you open a file that has macros, the yellow message bar appears with a shield icon and the Enable Content button. If you know the macro, or macros, are from a reliable source, use the following instructions: On the Message Bar, click Enable Content.

Enable or disable macros in Office files

(But I don’t get many emails in Korean language anyway.)

2 users thanked author for this post.

OscarCP, Microfix

Reply | Quote

I have these two questions: Are these issues only for users of “Enterprise” MS software for Windows 10?

If not, which versions of Windows and of Office are vulnerable to them?

Reading the information in the Web pages of those links I get the impression that are for “Enterprise” business versions, not for home or small business users running the “home” level of software.

Ex-Windows user (Win. 98, XP, 7); since mid-2017 using also macOS. Presently on Monterey 12.15 & sometimes running also Linux (Mint).

MacBook Pro circa mid-2015, 15" display, with 16GB 1600 GHz DDR3 RAM, 1 TB SSD, a Haswell architecture Intel CPU with 4 Cores and 8 Threads model i7-4870HQ @ 2.50GHz.
Intel Iris Pro GPU with Built-in Bus, VRAM 1.5 GB, Display 2880 x 1800 Retina, 24-Bit color.
macOS Monterey; browsers: Waterfox "Current", Vivaldi and (now and then) Chrome; security apps. Intego AV

Reply | Quote

woody wrote:

Thus, we’re getting a full exposure.

Requires user to double-click a particular cell on versions later than 2010. Are you really exposed? I’m not.

Is it a shock to find at the end of their article that, “Mimecast Targeted Threat Protection detects and blocks the use of this technique,” for a minimum of $1,200 per year?

2 users thanked author for this post.

AlexEiffel, OscarCP

Reply | Quote