.. /.Wiz

Phishing

Contributors:

mr.d0x

Description:

WIZ or Microsoft Wizard File are used by the Microsoft Office suite.

OS:

Windows

Mac

Recommendation:

Disable macros via GPO and whitelist the users that are permitted to run macros.

Resources:

https://www.trendmicro.com/vinfo/hk-en/security/news/cybercrime-and-digital-threats/spam-campaign-delivers-malware-via-wiz-targets-banks

File Samples: