Lambda Malware: the Hidden Threat in Excel Spreadsheets - Yonatan Baum & Daniel Wolfman 🇬🇧
Channel: Asso HZV
Date: 2023-08-10

This lecture will discuss a new technique discovered by the Mimecast Research Team.

This technique can be used for embedding malicious scripts in Excel documents using one of the latest Excel new features – LAMBDA, bringing new life to a previously considered dead threat. In the lecture, it will be shown how easily the technique can be used to evade existing static analysis engines and allows the user to run arbitrary code on their machine. The lecture will begin by introducing some background of the key terms such as Lambda, Macro, past Office malicious attacks – and then discuss the current state of threats using Lambda. The lecture will then delve into the technical background of the method, specifically into the use of Excel 4.0 macros and obfuscation to hide the malicious payload. The lecture will conclude with a demonstration of the technique, PoC of evading some engines in VirusTotal, and a discussion on its implications for security.

leHACK website: https://www.lehack.org
leHACK's twitter: https://twitter.com/_lehack_
leHACK instagram : https://www.instagram.com/_lehack_/