Beware when searching the web for template documents! New malicious website just discovered.
- Robert Salier
- Apr 3
- 2 min read
Updated: May 12
Beware when searching the web for template documents! Criminals have created template Microsoft Office documents that include malicious macros that, if enabled, will infect computers and other devices that run Microsoft Office apps.
In this latest example, a security researcher discovered that criminals have created the website lawliner.com to offer so -called “trusted legal templates” that actually contain these malicious macros. If Office macros have been disabled as they should be, users may be prompted to enable macros. If they do enable, the macro will initiate the download and installation of malware such as ransomware.
There are several learnings here for businesses and for individuals:
Law firms are a popular target for cybercriminals. FYI other popular targets are the healthcare and financial industries and consulting firms. They all store highly sensitive data such as customer information that can be held for ransom and/or sold on the dark web.
Ensure Microsoft Office macros are disabled by default on all staff devices. FYI, this is one of the Australian Cyber Security Centre’s eight highest priority security measures covered in their “Essential Eight”.
Ensure your staff are savvy to common criminal hacker techniques, including the use of Microsoft Office macros to infect computers and other devices. Ensure you have a program of staff awareness sessions and/or self-paced online learning. As an independent cybersecurity consultant specialising in small and medium businesses, I know the best-of-breed options and can help you select between them.
Ensure you use good browser protection software. As of today, at least two of the best-of-breed browser protection solutions already know of this latest cyber threat, so when you attempt to go to lawliner.com they provide a warning that it is a suspected phishing site. By the way, I’d be keen to hear whether the browser protection software that you use is aware of this particular malicious site. Please let me know! Landing on the homepage of lawliner.com is not in-its-self dangerous … just don’t sign up or download anything. Again, I know the best-of-breed browser protection solutions and can help you select between them.
