I published the following diary on isc.sans.org: “Malware Delivered via ‘.pub’ Files“.
While searching for new scenarios to deliver their malwares, attackers launched a campaignÂ to deliver malicious code embedded in Microsoft Publisher (.pub) files. The tool Publisher is less known thanÂ Word or Excel. ThisÂ desktop publishing toolÂ was released in 1991 (version 1.0) but it is still alive and included in the newest Office suite. It is not surprising that it support also macros… [Read more]