Defensive Office macro analyzer in Go: extracts VBA, deobfuscates it and emulates it in a fully simulated sandbox to recover commands, PowerShell, shellcode and dropped payloads without executing the sample. Weiterlesen: MaldocTrace
Intelligence View
⚡ tsecurity.de Intelligence
MaldocTrace
Defensive Office macro analyzer in Go: extracts VBA, deobfuscates it and emulates it in a fully simulated sandbox to recover commands, PowerShell, shellcode…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1059TA0002 · Execution
Command and Scripting Interpreter
Mitigation: M1038 Execution Prevention & Script Block Logging
Quelle: Kontext-Klassifikation des Artikeltextes · Konfidenz 82%
Enforce process and script logging (Sysmon/auditd), block execution of untrusted scripts.
Execution
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
No reader ratings yet
Was this page helpful?
0
Powered by tsecurity.de
tsecurity.de Hub
Related story clusters & sources (vector AI)
45 sources
ZDI-26-925: (0Day) Meta fairseq FairseqLAMB YAML File Parsing Code Injection Remote Code Execution Vulnerability
44 more sources
ZZDI: Published Advisories15 hours agoZDI-26-911: (0Day) Meta Detectron2 DensePose Deserialization of Untrusted Data Remote Code Execution Vulnerability ZZDI: Published Advisories15 hours agoZDI-26-910: (0Day) Meta Detectron2 LazyConfig Deserialization of Untrusted Data Remote Code Execution Vulnerability ZZDI: Published Advisories15 hours agoZDI-26-909: (0Day) Meta Detectron2 CfgNode.merge_from_file Deserialization of Untrusted Data Remote Code Execution Vulnerability ZZDI: Published Advisories15 hours agoZDI-26-907: (0Day) Meta Detectron2 vertex_feature_embedder Deserialization of Untrusted Data Remote Code Execution Vulnerability ZZDI: Published Advisories15 hours agoZDI-26-908: (0Day) Meta Detectron2 load_proposals_into_dataset Deserialization of Untrusted Data Remote Code Execution Vulnerability ZZDI: Published Advisories15 hours agoZDI-26-952: (0Day) Meta FAIRChem _cli YAML File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability
+38
14 sources
CVE-2025-40196 | Linux Kernel up to 6.6.113/6.12.53/6.17.3 kernel/workqueue.c quota_release_work denial of service (Nessus ID 275347 / WID-SEC-2025-2595)
13 more sources
VVulDB Updates7 hours agoCVE-2025-40261 | Linux Kernel up to 6.6.117/6.12.59/6.17.9 nvme_fc_delete_ctrl information disclosure (EUVD-2025-201196 / Nessus ID 277521) VVulDB Updates5 hours agoCVE-2025-68264 | Linux Kernel up to 6.12.61/6.17.11/6.18.0 ext4 ext4_update_inline_data/ext4_create_inline_data denial of service (EUVD-2025-203738 / Nessus ID 296481) VVulDB Updates5 hours agoCVE-2025-68265 | Linux Kernel up to 6.12.61/6.17.11 nvme request_queue use after free (EUVD-2025-203749 / Nessus ID 299530) VVulDB Updates5 hours agoCVE-2025-68261 | Linux Kernel up to 6.12.61/6.17.11/6.18.0 fs/ext4/indirect.c ext4_destroy_inline_data_nolock buffer overflow (EUVD-2025-203741 / Nessus ID 298404) VVulDB Updates5 hours agoCVE-2025-68206 | Linux Kernel up to 6.17.8 nf_nat_setup_info state issue (Nessus ID 296481 / WID-SEC-2025-2868) VVulDB Updates5 hours agoCVE-2025-68291 | Linux Kernel up to 6.12.60/6.17.10 tcp_send_active_reset divide by zero (EUVD-2025-203789 / Nessus ID 298404)
+7
10 sources
Pixel users are getting a major Android Auto update – and it rivals Siri AI
9 more sources
ZZDNET3 hours agoOur 3 favorite Android Auto cables (and why you might want to switch to wired) DDroid Life1 day agoAndroid 17 QPR2 Released for Pixel Devices! RSS- Futurezone15 hours agoAndroid Auto: Für diese Smartphones ist jetzt Schluss RSS- Futurezone1 hour agoAndroid Auto: Wichtige Änderung für Pixel-Nutzer aufgetaucht – das kannst du erwarten ZZDNET3 hours agoOur 3 favorite Android Auto cables (and why you might want to switch to wired) Nnews2 days agoAndroid Auto requires Android 11 or higher now – check your compatibility
+3
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/en/4335406/it-security-tools/maldoctrace/