Jump to content

Malwarebytes blocking Excel Add-In Macro


djublonskopf

Recommended Posts

We use a query tool called Showcase (by HelpSystems), which has a macro-based add-in for Excel. Starting today, MalwareBytes Cloud is blocking users from opening .xlsm files that call Showcase macros as "Malware.Exploit.Agent.Generic".

I'm not sure how to get the logs that everyone else seems to post from the cloud dashboard, but here's a sample detection:

Detection Name:Malware.Exploit.Agent.Generic

Action Taken:blocked

Category:Exploit

Scanned At:12/04/2020 11:14:34 AM

Reported At:12/04/2020 11:14:35 AM

Type:exploit

Endpoint: XXXXX.ourdomain.tld

Location: Mapped-Network-Drive\Path\filename.xlsm

Group Name:Default Group

Affected Applications:Microsoft Office Excel

Link to post
Share on other sites

  • 2 months later...

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.