Phishing
Double Click
Macros
Contributors:
mr.d0x
Description:
POTM is a Microsoft Macro-Enabled PowerPoint template file. It can be used to execute malicious macros.
OS:
Windows
Mac
Recommendation:
Disable macros via GPO and whitelist the users that are permitted to run macros. For end users, turn off macros from PowerPoint's settings.
Resources:
File Samples: