3 ms·
Lots of supposedly known senders that are actually hostile actors, some account takeovers, and there are many external facing people who expect to receive word
by ghein 8y ago
Lots of supposedly known senders that are actually hostile actors, some account takeovers, and there are many external facing people who expect to receive word docs from unknown people.
Accounts payable, for example, gets lots of these things as an expected part of the workflow, as does legal, and various parts of management.
PDFs have had problems of their own.
Many of the people that you most want to secure are the same people who need to be exposed to the outside world. CEO and CFO HAVE to deal with random people, as it's the job, but they are the most dangerous. If someone needs a 5 step verification process that takes days to communicate with your CEO, then you are not going to get may new clients or investors.
- Humdeee 8y agoYep. And what about the most obvious? HR. Resumes, cover letters, reference material, etc. Many places don't subscribe to the evil ATS or taleo parser tools and casually open whatever is sent to them with a familiar icon or extension as attachment.
- cmurf 8y agoThese people need to be receiving Word Docs with macros and need to open those docs executing macros by default, from unknown/unauthenticated people? That doesn't make much sense to me. I see automated tasks as being internal. Receiving automated tasks from random people and executed by default seems like asking for trouble.
- anonymousbank 8y agoYou dont understand. Everyone has all Macros enabled by default because Bob down the hall wrote an Excel macro that lets us plug numbers in our spreadsheet from the mainframe in 5 seconds instead of typing them for 20 minutes. Everyone knows that to get the Macro to work, step one is to enable all macros.