Re: Macros now replaced by XML

[Giovanni Bechis]

On 11/16/18 7:11 PM, Alex wrote:
> Hi,
> 
> It seems spammers are now using XML Word documents instead of ones
> containing macro viruses. Virtually no antivirus scanners are catching
> this now.
> 
> These are hacked Outlook accounts sending virus/phish attachments.
> 
> https://pastebin.com/8QxujfAt
> 
New OLEMacro plugin just committed catches it.
 Cheers
  Giovanni