ATT&CK · T1137.004 · sub-technique
Outlook Home Page
Tactics: persistence
About
Adversaries may abuse Microsoft Outlook's Home Page feature to obtain persistence on a compromised system. Outlook Home Page is a legacy feature used to customize the presentation of Outlook folders. This feature allows for an internal or external URL to be loaded and presented whenever a folder is opened. A malicious HTML page can be crafted that will execute code when loaded by Outlook Home Page. Once malicious home pages have been added to the user’s mailbox, they will be loaded when Outlook is started. Malicious Home Pages will execute when the right Outlook folder is loaded/reloaded.
Used by actors
1 known groups
Software
1 malware/tools implement this
Corpus indicators tagged with this technique
0 indicators in the corpus carry T1137.004.
No corpus indicators are tagged with this technique yet.