Russia-linked Gamaredon hacker crew using Microsoft's Visual Basic for Applications to pwn Microsoft's Outlook

Security researchers claim to have uncovered "several previously undocumented post-compromise tools" used by a Russia-linked APT to target Microsoft Office and Outlook through Visual Basic for Applications. In a statement about its findings, Slovakian infosec biz ESET said the tools "inject malicious macros or references to …

[Stuart Castle]

Thought this had been killed off years ago..

[a_yank_lurker]

VBA

VBA is the disease that keeps on giving.

[IGotOut]

VBS through Outlook...

How many things do you have to disable to even let this through...

Please don't tell me "Cloud" has undone 20 years of basic security.