Maldoc Duplicating PowerShell Prior to Use, (Mon, Oct 29th)

Reader Tor submitted a suspicious email he received today. It has a Word document attachment, which, no surpise, has VBA macros.

Article Link: https://isc.sans.edu/diary/rss/24254