Threat Advisory

Hackers weaponize Microsoft Visual Studio add-ins to push malware

Threat: Malware
Criticality: High
[subscribe_to_unlock_form]

Summary:

Microsoft Visual Studio Tools for Office, also known as VSTO are being used by hackers very frequently as a means of achieving persistence and executing code on a targeted machine. Software development kit VSTO, is a part of Microsoft's Visual Studio IDE. The method is an alternative to inserting VBA macros that fetch malware from the internet into documents. VSTO is a tool that gives attackers the capability to install malware, execute it, and achieve persistence on the target system.[/subscribe_to_unlock_form]

Summary:

Microsoft Visual Studio Tools for Office, also known as VSTO are being used by hackers very frequently as a means of achieving persistence and executing code on a targeted machine. Software development kit VSTO, is a part of Microsoft's Visual Studio IDE. The method is an alternative to inserting VBA macros that fetch malware from the internet into documents. VSTO is a tool that gives attackers the capability to install malware, execute it, and achieve persistence on the target system.[emaillocker id="1283"]

Threat Profile:

References: 

The following reports contain further technical details:

https://www.bleepingcomputer.com/news/security/hackers-weaponize-microsoft-visual-studio-add-ins-to-push-malware/

[/emaillocker]
crossmenu