.. /.Mam

Executable
Phishing
Double Click

Contributors:

Suraj Khetani - @rootreaver

Description:

MAM are shortcut Microsoft Access Macro files that can be executed by double clicking them.

OS:

Windows

Recommendation:

Block MAM extensions over Email and Proxy

Resources:

https://posts.specterops.io/phishing-tales-microsoft-access-macro-mam-shortcuts-c0bc3f90ed62

File Samples: