A "Stream O" Maldoc, (Fri, Jul 5th)

Reader Robert submitted a malicious document. It just happens to be a maldoc with the payload hidden in a user form, as discussed in diary entry “Maldoc: Payloads in User Forms” last weekend.

Article Link: https://isc.sans.edu/diary/rss/25096