OnDemand SME Support = Get Your Questions Answered! Get an iPad mini, Surface Go 2, of $300 Off Now


To attend this webcast, login to your SANS Account or create your Account.

This webcast has been archived. To view the webcast login into your SANS Portal Account or create an account by clicking the "Get Registered" button on the right. Once you register, you can download the presentation slides below.

The Return of the Malicious Macro, and the Economics of Cybercrime

  • Thursday, August 13, 2015 at 1:00 PM EDT (2015-08-13 17:00:00 UTC)
  • Patrick Wheeler, Jerry Shenk


  • ProofPoint

You can now attend the webcast using your mobile device!



Malicious macros have returned with a vengeance. Why are cybercriminals suddenly favoring what until recently had been considered an outdated exploit technique. The answer may well be economics, as cybercriminals are just as likely to keep an eye on the bottom line as the CFO in your enterprise.

Proofpoint has delivered a new report, The Cybercrime Economics of Malicious Macros, based on research into the recent explosion of malicious Office doc attachment email campaigns (often delivering Dridex). The report finds that this technique has grown newly popular with attackers because, from a cost perspective, malicious macros deliver the most bang for the buck by combining lower up-front and maintenance costs with higher effectiveness.

In this webcast, Jerry Shenk of the SANS Institute and Patrick Wheeler of Proofpoint will discuss the economics of cybercrime and educate attendees how to protect their organizations from malicious macros and other advanced threats.

Attend the event and sign up for the follow-up report summarizing the discussion, written by Jerry Shenk.

Speaker Bios

Jerry Shenk

Jerry Shenk serves as a senior analyst for the SANS Institute and is senior security analyst for Windstream Communications, working out of the company's Ephrata, Pennsylvania, location. Since 1984, he has consulted with companies and financial and educational institutions on issues of network design, security, forensic analysis and penetration testing. His experience spans networks of all sizes, from small home-office systems to global networks. Along with some vendor-specific certifications, Jerry holds six GIAC certifications - all completed with honors - and five with Gold certifications: GCIA, GCIH, GCFW, GSNA, GPEN and GCFA. He also holds the CISSP certification.

Patrick Wheeler

Patrick Wheeler is Proofpoint’s director of product marketing, with a focus on solutions for defending against advanced malware. Over almost fifteen years in information security at industry leaders, Patrick Wheeler has held roles in product management and product marketing for a wide range of enterprise solutions, including network and endpoint security, vulnerability management, data loss prevention and mobile.

Need Help? Visit our FAQ page or email webcast-support@sans.org.

Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.