Microsoft Word macro malware automatically adapts attack techniques for macOS, Windows: "When executed, the macro reads and decodes base 64-encoded data stored in the file's "comments" property. This code turns out to be a python script that attempts to detect the operating system the file is opened inside, running one of two different functions depending on if the host system is running macOS or Windows. "

Labels: malware