Skip to content
Threat Feed
Subscribe

Product

Microsoft Access

1 brief RSS
medium advisory

Suspicious Execution via Microsoft Office Add-Ins

This rule identifies suspicious execution patterns where Microsoft Office applications launch add-ins from unusual paths or with atypical parent processes, potentially indicating initial access via a malicious phishing MS Office Add-In.

Microsoft Word +3 office-addins initial-access phishing
3r 4t