Entries by Rodolfo Saccani
New wave of EXCEL 4.0 malware campaigns abusing FORMULA macro function
VBA has been introduced in Excel 5.0. Before then Excel only had XLM macros, which are still supported today. XLM macros allow writing code by entering statements directly into cells, just like normal formulas. In fact they are called macro-formulas. In case you are curious, the reference document of the Excel 4.0 macro functions is […]
Email trojan horse: application/html entity
We just discovered a new trick that is currently being used to slip malicious html files through email security solutions and, in some cases, through antivirus engines. The trick is quite simple: declaring an email entity as “application/html” instead of “text/html”. “application/html” is an invalid type and this allows it to slip through some checks. […]
10 very practical suggestions for choosing an email archiving solution
What makes a good archiving solution? Count 1 to 10: 1- No vendor lock-in Archiving email is a long term commitment, you need to think long term and make sure that you will be able, in 10 or 20 years from now, to autonomously, easily and reliably make use of your email archive. If […]
Phishing campaign uses Google reCAPTCHA to avoid Sandbox detection
Recent email phishing campaigns are using Google reCAPTCHA as part of their efforts to bypass click-time protection sandboxing, requiring user interaction before delivering the actual contents of the phishing page. We have seen two different instances of such campaigns, both are targeting Office 365 users in order to collect their credentials. Implementation details suggest that […]
LIBRAESVA SRL
Piazza Cermenati, 11
23900 Lecco - ITALY
VAT ID: 03442930131
LIBRAESVA LIMITED
Spaces, 83 Baker St
London W1U 6AG - United Kingdom
VAT ID: 274381685
LIBRAESVA INC
2608 2nd Ave, Suite 327
Seattle, WA 98121 - United States