Excel-Phish

Introduction

Phish password protected Excel-Files - written by 0x23353435 and S3cur3Th1sSh1t.

The corresponding blogpost can be found here:

https://s3cur3th1ssh1t.github.io/Phish-password-protected-Excel-files/

TODO by the attacker

• Change variables within AutoOpen Module
• Add data to document to make it same size as victim document to increase phishing success
• Change 'Excel-Phish' filename to match your victim document

The xlsm will work as-is, however you may wish to recreate the document rather than running random macros from the Internet. Therefore the three standalone VBA files have been exported for review.