In November, security researchers from Proofpoint discovered a nasty Trojan called August. The infection technique involves Word macros and Powershell, and the eventual payload attempts to steal user credentials and information-rich documents from the victim. 95.4 percent of the 111 malware families analyzed in the report used Powershell in some way, Symantec says. There may be no simple prevention solution here, save to educate workers about what happens when you open a suspicious Word document, the researchers say. August malware and others like it are difficult to detect, both at the gateway and the endpoint.”]
Source: https://securityintelligence.com/news/august-malware-tries-to-steal-credentials/