Michigan State Police Cyber Command Issues Warning

The Michigan Cyber Command Center (MC3) is aware of an increase in phishing emails containing malicious macro-enable Word documents being delivered in Michigan.

Analysis:

Malicious macro-enabled Word documents are known to introduce trojan malware capable of executing code and exfiltrating or encrypting data.

The MC3 recommends users prevent macros from automatically running on their systems. Organizations should consider a group policy disabling the automatic running of macros across their environment.