Skip to content
Threat Feed
Subscribe

Tag

Office-Add-In

1 brief RSS
high advisory

Abuse of Microsoft Office Add-in XLL Files for Persistence

Adversaries leverage the RegisterXLL COM method via PowerShell to execute malicious add-ins and achieve persistence within Microsoft Office environments.

persistence office-add-in powershell windows threat-detection
1r 1t