nerdexam
EC-Council

212-89 · Question #171

Malicious downloads that result from malicious office documents being manipulated are caused by which of the following?

The correct answer is D. Macro abuse. Malicious downloads initiated through manipulated office documents typically involve macro abuse. Macros are scripts that can automate tasks within documents and are embedded within Office documents like Word, Excel, and PowerPoint files. While macros can be used for legitimate…

Incident Handling and Response Technologies

Question

Malicious downloads that result from malicious office documents being manipulated are caused by which of the following?

Options

  • AClickjacking
  • BImpersonation
  • CRegistry key manipulation
  • DMacro abuse

How the community answered

(68 responses)
  • A
    1% (1)
  • B
    1% (1)
  • C
    4% (3)
  • D
    93% (63)

Explanation

Malicious downloads initiated through manipulated office documents typically involve macro abuse. Macros are scripts that can automate tasks within documents and are embedded within Office documents like Word, Excel, and PowerPoint files. While macros can be used for legitimate purposes, they can also be abused by attackers to execute malicious code. When an office document with a malicious macro is opened, and macros are enabled, the macro can run arbitrary code that leads to malicious downloads, installing malware or performing other unauthorized actions on the victim's system. Macro abuse has become a common vector for cyber attacks, as it exploits the functionality of widely used office applications. Attackers often craft phishing emails with attachments or links to documents that contain malicious macros, tricking users into enabling macros to execute the malicious code. This method is effective for bypassing some security measures since it relies on user interaction and exploitation of legitimate features.

Topics

#macro abuse#malicious office documents#malware delivery#document-based attacks

Community Discussion

No community discussion yet for this question.

Full 212-89 Practice