LUCY

User Tools

Site Tools

Trace:
create_a_phishing_campaign_with_a_word_macro

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
Next revisionBoth sides next revision
create_a_phishing_campaign_with_a_word_macro [2018/01/13 17:54] – [Create Custom Macro templates] lucycreate_a_phishing_campaign_with_a_word_macro [2018/01/13 17:59] – [Available Macro File Templates] lucy
Line 10: Line 10:
   * **Macro Simulation "Financial Bonus":** This Macro simulation will access the command shell of a windows system and execute some commands (can be configured in the according template) and then use the browser to send back the output of those commands. Please note that this type of Macro that tries to access the client's file system is often detected as malicious in antivirus solutions.   * **Macro Simulation "Financial Bonus":** This Macro simulation will access the command shell of a windows system and execute some commands (can be configured in the according template) and then use the browser to send back the output of those commands. Please note that this type of Macro that tries to access the client's file system is often detected as malicious in antivirus solutions.
   * **Macro Simulation "POST ONLY":** This Macro simulation is working in LUCY 3.0 only. It will do a simple http or https connection back to LUCY upon opening which will notify the LUCY administrator that the word has been opened and the Macro has been activated. The Macro can be used in any file based or mixed attack scenarios either as a mail attachment or as a file that can be downloaded from a landing page created by LUCY.   * **Macro Simulation "POST ONLY":** This Macro simulation is working in LUCY 3.0 only. It will do a simple http or https connection back to LUCY upon opening which will notify the LUCY administrator that the word has been opened and the Macro has been activated. The Macro can be used in any file based or mixed attack scenarios either as a mail attachment or as a file that can be downloaded from a landing page created by LUCY.
 +
 +Please note, that those are only two samples. You can create your own template. Please check the tutorial at the bottom of this page.
  
  
Line 168: Line 170:
 **Example: create a copy of an existing template** **Example: create a copy of an existing template**
 Lets say you want to create a new macro template based on the existing template "info.doc" (POST only) called mydocument.doc, you need to go through the following steps: Lets say you want to create a new macro template based on the existing template "info.doc" (POST only) called mydocument.doc, you need to go through the following steps:
-Step 1: Select the template "Macros (POST only) +  * Step 1: Select the template "Macros (POST only) 
-Step 2: Press the copy button +  * Step 2: Press the copy button 
-Step 3: Download the "info.doc" from the template and save it locally +  * Step 3: Download the "info.doc" from the template and save it locally 
-Step 4: Edit the Word File, without enabling the Macro and save it under your new name "mydocument.doc" +  * Step 4: Edit the Word File, without enabling the Macro and save it under your new name "mydocument.doc" 
-Step 5: Delete the existing file "info.doc" in the template "Macros (Post only) (copy)" +  * Step 5: Delete the existing file "info.doc" in the template "Macros (Post only) (copy)" 
-Step 6: Upload your new file "mydocument.doc" to the template and save the template+  * Step 6: Upload your new file "mydocument.doc" to the template and save the template
  
  
create_a_phishing_campaign_with_a_word_macro.txt · Last modified: 2020/08/19 16:31 by lucy