Threat Update
Threat actors are creating socially engineered emails containing PowerPoint file attachments with the extension “.ppam” to hide malicious executables which can rewrite Windows registry settings to gain control over end user’s computers. It is one of many stealthy tactics used to target desktop users while evading security detection and appearing legitimate. FinGarde recommends that all end users remain vigilant and report any suspicious emails to us before accessing any attachments.
Technical Detail & Additional Information
WHAT IS THE THREAT?
In October 2021, reports revealed that attackers were using .ppam files to disguise ransomware. The .ppam file was designed to encrypt files and rename all encrypted files by adding the .ppam extension. At the start of 2022, researchers observed a phishing campaign where attackers are sending socially engineered emails to their target and attaching these .ppam files. While the .ppam files appear legitimate, they include malicious payloads that can execute several functions on an end user’s computer without their authorization. These functions can install new programs that can create and open new processes, change file attributes, and dynamically call imported functions. This campaign enabled attackers to evade existing security measures with a file that is rarely used and won’t set off any alarms.
WHY IS IT NOTEWORTHY?
This phishing campaign is one of many new email-based campaigns discovered by researchers where attackers are targeting desktop users that leverage word-processing and collaboration apps like the Microsoft Office suite. PowerPoint is a commonly used Microsoft program which can utilize the .ppam file for additional functionality to develop slideshow presentations. Since these phishing emails are going undetected by security engines, it is important that all end users use caution before attempting to access email attachments. Typically, attackers use emails to deliver malicious files or links to steal user information.
WHAT IS THE EXPOSURE OR RISK?
Attackers are utilizing email services to deliver these malicious payloads to end-users. Without proper training on how to handle these suspicious emails, end-users are likely to click on the attachment and execute the malicious payload. Once the computer is infected, the attackers have unauthorized control over the end-user computer and can potentially gain access to the confidential information, spread across the environment, or add/remove programs as they see fit.
WHAT ARE THE RECOMMENDATIONS?
FinGarde recommends that all of our clients implement training sessions for their end-users on how to identify and report phishing emails. Additionally, security administrators should implement email protection which can download all files into a sandbox and review them for malicious content.
REFERENCES
For more in-depth information about the recommendations, please visit the following links:
- https://threatpost.com/powerpoint-abused-take-over-computers/178182/
- https://www.pcrisk.com/removal-guides/14314-ppam-ransomware#:~:text=Discovered%20by%20Petrovic%2C%20Ppam%20is,placing%20it%20in%20all%20folders
If you have any questions, please contact us.
Can you be more specific about the content of your article? After reading it, I still have some doubts. Hope you can help me.
That’s a fascinating point about data-driven betting strategies! Seeing platforms like 588jl casino integrate analytics is a smart move for informed players. It’s changing the game! 🤔
Galera, tô afim de uns slots e me falaram da VZ66Slot. Os gráficos são bons? Tem bastante opção? Aceito dicas! Fica a dica: vz66slot
It’s fascinating how platforms like ninogaming slot are prioritizing transparency with things like RTP & KYC-smart for building trust! The accessibility via app & website is key for the Philippines market, too. 🤔
Struggling to get into 188bet? cachvao188bet helped me out. Super easy guide. Get on it guys: cachvao188bet
Thank you for your sharing. I am worried that I lack creative ideas. It is your article that makes me full of hope. Thank you. But, I have a question, can you help me?
Thanks for sharing. I read many of your blog posts, cool, your blog is very good.
I don’t think the title of your article matches the content lol. Just kidding, mainly because I had some doubts after reading the article.
Excellent pieces. Keep posting such kind of information on your blog. Im really impressed by it.
Yo fam, just gotta shout out ketquanet9! Been using it for a bit, and it’s been solid. Give it a try and lemme know what you think! Worth it! ketquanet9
Alright, been browsing thienhabetvip, seems pretty top-notch. Good selection of content, and fast loading times. If you’re looking for something reliable, check them out: thienhabetvip
Decided to give bet169 a try, and honestly, I’m digging it. The platform is easy to use, and they have a good range of betting markets. The customer support was also pretty responsive when I had a question. Check out bet169 and see for yourself!
C444 is alright. Simple, clean, and easy to use. I’m not blown away, but it does what it says on the tin. Good for a quick fix. Find out what I’m talking about: c444
I found luckypk777 pretty engaging. The interface is clean and the games load fast. Been recommending it to my friends. You should try it out for yourself to see the hype: luckypk777
Hey, anyone tried downloading from K1gameapk? Thinking about giving it a whirl. Let me know if it’s any good! k1gameapk
I don’t think the title of your article matches the content lol. Just kidding, mainly because I had some doubts after reading the article.
Just got my s9gamelogin sorted. So easy to get into the game! Worth a look if you’re after a quick login. Check it here s9gamelogin
Yo, check out s92gamedownload! Found some sweet games there. It’s a good spot to grab your next addiction. s92gamedownload
Poker and betting games, eh? pkrbetgame sounds like my kind of party. Time to sharpen my skills. pkrbetgame
Your article helped me a lot, is there any more related content? Thanks! https://accounts.binance.com/es-MX/register-person?ref=GJY4VW8W
Thank you for your sharing. I am worried that I lack creative ideas. It is your article that makes me full of hope. Thank you. But, I have a question, can you help me? https://accounts.binance.info/en-ZA/register?ref=B4EPR6J0
I don’t think the title of your article matches the content lol. Just kidding, mainly because I had some doubts after reading the article. https://accounts.binance.com/en/register?ref=JHQQKNKN
Trying my login to ah88comlogin. Hoping for some easy access and smooth gameplay. Take a peek at ah88comlogin.
Trying to log into 1win Aviator. Hope I remember my password! Anyone else playing this game? Good luck everyone! Find it here: 1winaviatorlogin
Heading over to 666betlogin. Wishing myself luck! Need to win back what I lost last week lol. Give it a shot here: 666betlogin
Your point of view caught my eye and was very interesting. Thanks. I have a question for you. https://accounts.binance.com/vi/register?ref=MFN0EVO1
Thanks for sharing. I read many of your blog posts, cool, your blog is very good.
Roulette’s allure is fascinating – the probabilities are clear, yet the randomness keeps things exciting! Seeing platforms like jl59 vip focus on secure, localized gaming for the Philippines is smart. Strategic gameplay is key, and a reliable platform matters!
Can you be more specific about the content of your article? After reading it, I still have some doubts. Hope you can help me.
Thank you for your sharing. I am worried that I lack creative ideas. It is your article that makes me full of hope. Thank you. But, I have a question, can you help me? https://accounts.binance.com/register-person?ref=IHJUI7TF
I don’t think the title of your article matches the content lol. Just kidding, mainly because I had some doubts after reading the article.
Giving 88iwin a whirl. Their interface looks clean enough. Gonna test out a few games and see how it goes. 88iwin
Alright guys, let me tell you, f168n.com is where it’s at! Quick payouts, loads of options. What’s not to love?
Alright, so I checked out kalyanmatka.com. Seems like your basic Matka site. Nothing too fancy, but if you’re into that sort of thing, give it a whirl! kalyanmatka.com
I don’t think the title of your article matches the content lol. Just kidding, mainly because I had some doubts after reading the article. https://www.binance.info/en-ZA/register?ref=B4EPR6J0
Thank you for your sharing. I am worried that I lack creative ideas. It is your article that makes me full of hope. Thank you. But, I have a question, can you help me? https://accounts.binance.info/fr-AF/register-person?ref=JHQQKNKN
Alright gamers, need the latest version of vn123? This site’s got the tải vn123 link you need. Grab it while it’s hot: tải vn123
Having trouble topping up your account? This site simplifies nạp tiền qh88 vet. Smooth and straightforward process. Give it a look if you’re stuck!: nạp tiền qh88 vet
Jili Golden Empire, that’s the one with the spinny symbols right? Yeah not bad if you are into that sort of game. jili golden empire
Can you be more specific about the content of your article? After reading it, I still have some doubts. Hope you can help me.
I don’t think the title of your article matches the content lol. Just kidding, mainly because I had some doubts after reading the article. https://accounts.binance.com/en-NG/register-person?ref=YY80CKRN
Pinoytime, my go-to for all things Filipino entertainment! Always reliable and easy to use. Check it out pinoytime!
Just registered on alanobet98. Got a hunch about this one. Let’s find out: alanobet98
About to jump into sugarrushextreme. The name alone is exciting. Check the link here: sugarrushextreme
Your point of view caught my eye and was very interesting. Thanks. I have a question for you. https://www.binance.com/en/register?ref=JHQQKNKN
Playing around on 99pot today. Wishing me luck!
89fgamedownload! I’m always looking for new game downloads, gonna see if this is legit. Will post a review later. Check the site here 89fgamedownload
H2betapp! Another app to check out. I wonder what the differences are. Gonna download it and see. Worth to try. Find it here h2betapp
7075BetLogin. The interface is slick, pretty seamless login process too. Got a decent bonus for signing up. Worth a shot if you’re looking for somewhere new. See it here 7075betlogin!
S777Login, just wanted to say your login process is slick! No headaches, straight to the games. Appreciate that smooth experience. Looking forward to more wins!s777login
Pin77App, hey! Loving the mobile app. Super convenient to get a few games in on my commute or on break. The interface is intuitive. Nice work!pin77app
Can you be more specific about the content of your article? After reading it, I still have some doubts. Hope you can help me. https://www.binance.com/zh-CN/register?ref=WFZUU6SI
Can you be more specific about the content of your article? After reading it, I still have some doubts. Hope you can help me.
Thanks for sharing. I read many of your blog posts, cool, your blog is very good.
Your article helped me a lot, is there any more related content? Thanks!
I don’t think the title of your article matches the content lol. Just kidding, mainly because I had some doubts after reading the article.
Your point of view caught my eye and was very interesting. Thanks. I have a question for you.
I visited several web pages but the audio feature for audio songs existing at this web site is in fact superb.
Hello it’s me, I am also visiting this web site on a regular basis, this website is truly nice and the viewers are genuinely sharing fastidious thoughts.
Been playing on jili0 lately and it’s a vibe! Easy to use and has some cool games. Worth checking out, yeah! Here is a link -> jili0
Downloaded the 777sxgameapk and it’s… quirky. Some interesting games, though the interface could use some love. Proceed with caution and maybe an antivirus scan just in case. You can find it at: 777sxgameapk
Alright, y222game is on my radar. It’s a cool concept but needs more content, I think. Potential is there, just needs some polish and updates! Give it try and see for yourself at: y222game
Yo, 51gameonline is legit! Been playing here for a while now and the payouts are quick, and the game selection is awesome. Definitely worth checking out 51gameonline.
Megacasino678 is pretty sweet! Big selection of games and some fat bonuses. What’s not to like? Check it out and thank me later! megacasino678
Hey, slotphlogin! Been spinning those reels lately and the site’s faster than ever. Smooth gameplay, fewer glitches. Definitely my go-to spot when I’m feeling lucky. Check it out if you haven’t slotphlogin
Thanks for sharing. I read many of your blog posts, cool, your blog is very good. https://www.binance.info/en/register?ref=JHQQKNKN
R777casino, eh? Heard some buzz. Might check it out. See if lady luck’s smilin’. Feels kinda new and exciting, ya know? Might be worth a punt. Take a peek at r777casino
Casinomx77 is my jam lately. Good selection of slots and the live dealer games are a blast. Payouts have been reasonably quick too, which is always a plus. Take a look: casinomx77
Finally got around to downloading vnlmxcasinodescargar, and it’s not bad! Installation was easy, and the app version runs smooth. If you like playing on the go, give it a download: vnlmxcasinodescargar
Can you be more specific about the content of your article? After reading it, I still have some doubts. Hope you can help me. https://accounts.binance.info/es-MX/register-person?ref=GJY4VW8W
I don’t think the title of your article matches the content lol. Just kidding, mainly because I had some doubts after reading the article.
Just cruised through et365. Looks like a decent spot for sports betting. I’m tempted to place a wager on the game tonight. Check it out at et365.
Alright folks, just tried out gbgbet1. Seems legit! Good odds and the site’s easy to navigate. Definitely worth a look if you’re into that sort of thing. Check it out here: gbgbet1
Hey guys, been checking ketqua.nét for the latest results. Pretty reliable and quick updates. A solid resource for all things lottery! Find it here: ketqua.nét
I don’t think the title of your article matches the content lol. Just kidding, mainly because I had some doubts after reading the article. https://accounts.binance.com/bn/register?ref=WTOZ531Y