Dodge Emails carrying Malware Masquerading as Legitimate File

Your download is in progress and it will be complete in just a few seconds! If you face any issues, download manually here

Thank you for registering with ManageEngine.

We will send the download link to the registered email ID shortly.

Manage and Secure Microsoft 365 with M365 Manager Plus

  •  
  •  
  •  
  • By clicking 'Download 30-day free trial' you agree to processing of personal data according to the Privacy Policy.

A newly discovered malware is masquerading in the form of a Microsoft PowerPoint file which downloads the infection as soon as users hover over a link. The file is named as order & prsn.ppsx' or 'order.ppsx' or 'invoice.ppsx' and is sent as an attachment through email to victims with the subject line 'RE:Purchase orders #6933' or 'Fwd:Confirmation'.

What happens?

While PowerPoint files are written as PPTX, this file that comes attached in the email reads as PPSX. The file format is identical to PowerPoint files but they enter the PowerPoint presentation view directly when opened. On opening, there is a message written in bright blue font saying, 'Loading Please Wait' which is the malicious link. What makes the malware extremely dangerous is that users do not even have to click on this malicious link. The victims only need to hover over the link and the malicious code will be executed.

How to secure your system?

As these emails use attractive subjects to lure the users to open emails, we must filter these emails based on the subjects. M365 Manager Plus provides exhaustive reports on Microsoft 365 services to gain insights on the happenings inside your organization. With Messages by Subject Report, you can identify the emails with subjects that are suspicious to you.

Generate Messages by Subject Report

  • Go to Reports tab.
  • Select Mailbox Reports in the left pane.
  • Select Messages by Subject report under Content Reports.
  • Click Generate Now.

Once you identify such emails, find the senders and update your malware and spam filter policies to filter emails from them. After updating malware/spam filter policies, you can use M365 Manager Plus' Mail Trace auditing to view the messages filtered by them.

To know more about the reports provided by M365 Manager Plus, click here.

Why businesses choose M365 Manager Plus?

What our customers say

  • We can now effectively reconcile which licenses we are using in the organization and assign the cost to the business unit. We were also able to identify a number of license changes that could be put in place that reduced our total Microsoft 365 spending.

    Timothy Ransom
    Group IT/IS manager at The Eclipse Group, United Arab Emirates

  • M365 Manager Plus is valuable to our future business and, most importantly, it allows me to keep improving the level of service we provide.

    IT infrastructure manager
    Sunstar Suisse S.A.

  • Our firm purchased ManageEngine M365 Manager Plus to help us protect our business from email-borne cyberthreats. We are absolutely satisfied with the features and ease of use. It has surpassed our expectations.

    Insurance agent
    Security and risk management Gartner review

A holistic Microsoft 365 administration solution

One-stop solution for all your
Microsoft 365 administration needs!

Download now