VERY IMPORTANT

Malware researcher Brad Duncan recently reported analysis on a new variant of Dridex he observed on June 17th. The malware utilizes an Application Whitelisting technique to bypass mitigation via disabling or blocking of Windows Script Host. The technique takes advantage of WMI command-line (WMIC) utility's weak execution policy around xls scripts.