Netskope Threat Labs

VBA.Agent

ATP Sandbox Adv. HeuristicsAV

This generic detection identifies malicious macros written in Visual Basic for Applications that perform unauthorized actions when a document opens.

First seen
January 2022
Last seen
October 2026
Alert Name
Trojan.VBA.Agent.AEY
Trojan.VBA.Agent.AEY:188CA
Trojan.VBA.Agent.AIK
Trojan.VBA.Agent.AIK:5713F
Trojan.VBA.Agent.AKD
Trojan.VBA.Agent.AKX
Trojan.VBA.Agent.AL
Trojan.VBA.Agent.ALQ
Trojan.VBA.Agent.ALQ:2F5D5
Trojan.VBA.Agent.ALU