put together opening the spreadsheet gives you this page telling you the doc is protected by docusign protect service when in reality docusign has no such service the english here is more than possible and their cover story of why you need to even enable macros is rather convincing well to a layman of course running the macro will execute embedded malicious code inky tested the spreadsheet in a malware sandbox confirming the malicious intent of the dock if there was any doubt as inky explains the malware also attempted to make external connections to download more components or exfiltrate data but these attempts received a NUMBER_TOKEN not found error the error was likely due to a mistake on the part of the bad actors or it's possible that the malicious content was discovered on those hosts and had already been taken down because of that NUMBER_TOKEN we don't know what the true intentions of this campaign were though it could have been an attempted ransomware attack or a bank logon stealer the whole campaign is rather clever and imo quite well executed and i would imagine the average craigslist user is a little stuck in the past a bit of a boomer when it comes to technology so i wouldn't be surprised if this campaign had a relatively high success rate i'm curious when was the last time you used craigslist if ever am i just out of touch and is craigslist in reality an oasis of opportunity let me know in the comments also URL_TOKEN is now a thing i'm uploading all of my videos there along with a short written article there's also a link to watch my content on the alternative video platform library you can also read about what i get up to when i'm not making youtube videos for instance the pen testing tools i sell through my company maltronics if you enjoy this kind of video make sure to help me out by caressing the like button for the youtube ai as well as turning on the sub notifications if you want to see what goes on behind the scenes make sure to follow me on the instagrams i'm at jaunty i will of course link it in the description and if you're looking for something to watch next go check out my previous video on how bad actors have been exploiting squid game to infect victims as always sources will be linked in the video description stay tuned for more hacking videos and have a good one
START_SELFPROMO_TOKEN also URL_TOKEN is now a thing i'm uploading all of my videos there along with a short written article there's also a link to watch my content on the alternative video platform library you can also read about what i get up to when i'm not making youtube videos for instance the pen testing tools i sell through my company maltronics END_SELFPROMO_TOKEN BETWEEN_SEGMENTS_TOKEN START_INTERACTION_TOKEN if you enjoy this kind of video make sure to help me out by caressing the like button for the youtube ai as well as turning on the sub notifications if you want to see what goes on behind the scenes make sure to follow me on the instagrams i'm at jaunty i will of course link it in the description and END_INTERACTION_TOKEN