Escaping the Sandbox - Microsoft Office on MacOS - MDSec
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Applescript - T1059.002 Launchctl - T1569.001 Launchd - T1053.004 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Python - T1059.006 Tool - T1588.002 Applescript - T1155 Launchctl - T1152 Powershell - T1086
Show in Graph
Common Information
Type Value
UUID 990dca17-09a8-46a5-b90f-2de7d5b55487
Fingerprint 28888a10e9a7a6b5
Analysis status DONE
Considered CTI value 0
Text language
Published Aug. 2, 2018, 7:24 a.m.
Added to db Jan. 18, 2023, 11:28 p.m.
Last updated Nov. 17, 2024, 5:57 p.m.
Headline Escaping the Sandbox – Microsoft Office on MacOS
Title Escaping the Sandbox - Microsoft Office on MacOS - MDSec
Detected Hints/Tags/Attributes 37/2/12
Source URLs
Redirection Url
Details Source https://www.mdsec.co.uk/2018/08/escaping-the-sandbox-microsoft-office-on-macos/
URL Provider
Details Provider Source level domain
Details mdsec.co.uk www.mdsec.co.uk
Attributes
Details Type #Events CTI Value
Details Domain 3 
word.app
Details Domain 3 
com.apple.security.files.bookmarks.app
Details Domain 4 
com.apple.security.files.user-selected.read
Details Domain 5 
com.apple.security.network
Details Domain 33 
com.apple.security
Details Domain 3 
www.launchd.info
Details Domain 111 
www.apple.com
Details File 2 
document1.docx
Details File 4 
launchd.inf
Details File 3 
xpnsec.pl
Details Url 1 
http://www.launchd.info
Details Url 73 
http://www.apple.com/dtds/propertylist-1.0.dtd