Talos is publishing a glimpse into the most prevalent threats we’ve observed between November 10 and November 17. As with previous round-ups, this post isn’t meant to be an in-depth analysis. Instead, it will highlight key behavior characteristics, indicators of compromise, and how our customers are automatically protected from these threats. The most prevalent threat highlighted in this round up are: Office documents using obfuscated macros to launch powershell. The powershell process then downloads and executes a malicious payload.”]
Source: https://blog.talosintelligence.com/2017/11/threat-round-up-1110-1117.html