---
id: 8296
title: "Backdooring Office Documents"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/web-application-pentesting/backdooring-office-documents/"
published_at: "2013-03-23T00:00:00Z"
tags: ["phishing", "red-team", "social-engineering", "backdoor", "meterpreter", "office-macro"]
phying_url: "https://phying.com/item/8296"
lang: en
---

# Backdooring Office Documents

## Summary

Describes embedding a Base64 Meterpreter payload in an Office VBA macro so a legitimate emailed document can be re-sent as a backdoor after harvesting domain credentials.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2013-03-23T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/web-application-pentesting/backdooring-office-documents/
- **Phying News:** https://phying.com/item/8296