.. /.Oxps

Phishing
Native
Double Click

Author:

mr.d0x

Description:

OXPS files are Microsoft's version of PDF files. They are opened by default with Microsoft's XPS Viewer.

OS:

Windows

Recommendation:

Monitor OXPS files that are delivered as email attachments.

Resources:

https://isc.sans.edu/forums/diary/XPS+Attachment+Used+for+Phishing/23794/

File Samples:

Contributions: