.. /.Wiz

Phishing
Exploit
External

Author:

mr.d0x

Description:

WIZ or Microsoft Wizard File are used by the Microsoft Office suite.

OS:

Windows
Mac

Recommendation:

Disable macros via GPO and whitelist the users that are permitted to run macros.

Resources:

https://www.trendmicro.com/vinfo/hk-en/security/news/cybercrime-and-digital-threats/spam-campaign-delivers-malware-via-wiz-targets-banks

File Samples:

Contributions: