In this week's review:

• Microsoft DOES plan to work on blocking internet macros by default in Office, their pause is apparently temporary
• The DFIR Report - SELECT XMRig FROM SQLServer
• Hive ransomware gets upgrades in Rust
• From cookie theft to BEC: Attackers use AiTM phishing sites as entry point to further financial fraud

Blog: https://offsec.blog/
Youtube: https://www.youtube.com/channel/UCCWmudG_CTNAFBaV48vIcfw
Twitter: https://twitter.com/cyberthreatpov
Work with Us: https://securit360.com

Blog: https://offsec.blog/
Youtube: https://www.youtube.com/@cyberthreatpov
Twitter: https://x.com/cyberthreatpov

Spencer's Twitter: https://x.com/techspence
Spencer's LinkedIn: https://linkedin.com/in/SpencerAlessi

Work with Us: https://securit360.com