Netskope Threat Labs

MacrosBomber

ATP Sandbox Adv. Heuristics

MacrosBomber is a detection name for malicious Office macros that download and execute payloads.

First seen
July 2023
Last seen
October 2026
Alert Name
Document-Office.Trojan.MacrosBomber
Document-Word.Trojan.MacrosBomber
Script-Macro.Trojan.MacrosBomber
Script-WScript.Trojan.MacrosBomber
Win32.Trojan.MacrosBomber