Nicola Suter@nicolonsky
Windows #VBScript deprecation appears on the horizon. Let's see who and what still uses VBScript in your environments thanks to Microsoft Defender XDR & some KQL:
24313426.5K
Posts with #VBScript
#VBScript
Public posts on X that use #VBScript.
Related hashtags
#hta with plain #VBScript -> #bitsadmin (VT 3/58) 159355ff86aed19de50f3e78800f3749030f832521a93c2460a8dcca43d3c4e2 #njrat https[://filetransfer.io/data-package/yovW0lpr/download
11320
Sylvain Bruyere@sylvainbruyereExcited to share that while working @AirbusCERT ❤, I was fortunate enough to write a #VBScript/VBA #deobfuscator proto, based on partial evaluation and powered by ANTLR, C# and .Net Standard. vbSparkle was released yet 5 months ago ☞ #vbs #deobfuscator55816731.1K
Harm Veenstra | MVP@HarmVeenstraWe all know that VBScript has been deprecated and will be removed in future Windows releases. The PowerShell OSLicense module helps you activate licenses, query them, and more. In this blog post, I will show you how it works #PowerShell #SLMGR #VBScript111412.3K- Recent #Zloader #XLM docs 1⃣Hidden defined names (labels:frm) 2⃣Labels with only null chars 3⃣Duplicate labels (defined names selected with index) 4⃣GOTO with range (jumping to the 1st cell) Update #XLMMacroDeobfuscator & #XLRD2
62561 
053
clibm079@clibm079🔓The Art of Evasion: How Attackers Use VBScript and PowerShell in the Obfuscation Game 🔍Explore the full analysis here: 👉 @smica83 @AndreGironda @skocherhan @embee_research #CyberSecurity #Malware #VBScript #PowerShell #APT #ThreatIntel🛡️💻🚨26141.2K
Cory Smith@DualBrainIs #microsoft going (or at least willing) to open source #vbscript? If all that is stopping this from taking place is finding a good steward for the project... I'm happy to volunteer! Feel free to pass this along to the powers that be - let's see if we can make this happen!215645
032
📧🙄 Emotet News: E5 is spamming a new #OneNote lure, with embeeded #Javascript instead of #VBScript. We pushed an updated rule to Yaraify. ➡️ Happy hunting 🔍and have a nice weekend (except for you, Ivan) cc @abuse_ch @SpamhausTech
bom @bomccss#Emotet E5 の添付ファイルが.oneに変わ、デコイと通信先が変化しています。 デコイ画像の下に隠れているのは.jsファイルです。 サンプル 通信先 hxxps://oopt[.]center/bitrix/HKD1OCEK4mWEc0/ hxxp://aristonbentre[.]com/slideshow/O1uPzXd2YscA/1246612.9K
May or may not have wrote a #VBScript today that calls a #PowerShell script that runs #csharp code that uses P/Invoke / Win32 😬8014- Weird #malicious #hta (VT 0/59) > #VBScript > #PowerShell > Inject #shellcode into PS mem 1⃣ mixing HTML entity encoding with Unicode literals 2⃣ uses obsolete #execScript, the first arg is VBScript code, the second arg is JScript 3⃣ very interesting #PS 4⃣ SEEMS DOES NOT WORK
31224 
Information Security Buzz@Info_Sec_BuzzA True Remote Code Execution Bug: @TripwireInc @rapid7 #VBScript #Malvertising #Microsoft #vulnerability #infosec011
360 Threat Intelligence Center@360CoreSecThe Advanced Threat Response Team of 360 Core Security found a preciously patched #VBScript #vulnerability was likely a missed #0day. Researchers suspected it, together with other three, are all the cyber arsenals of #APT-C-06. Click to read more details:
04034
Digging into some VBScript -> .NET DLL -> EXE to find NETWIRE, in classic casual long-form content ;) With some special love to our friends at @snyksec to help spread the word The Big Fix event! Premieres 12:00 PM ET. #malware #vbscript #threatintel #ioc1949- Show more posts
