Microsoft Outlook is often used as the primary email client in corporate environments, making it a high-value target for threat actors. Any potential to exploit or modify the behavior of Outlook can be leveraged by attackers to perform operations from a trusted location and obtain access to sensitive information. Threat actors favor this route because it provides a stealthy and efficient means to bypass traditional security measures and establish a foothold within an organization's network. 

During this webinar, Principal Security Consultant, Oddvar Moe and Research Practice Lead, Christopher Paschen introduced a new open source tool, Specula. This tool allows Red Teamers to attack Microsoft Outlook to gain initial access and expand their access further into Outlook.

In this webinar, attendees learned:

• How seemingly minor changes can lead to further explorations
• How to build an extensible framework
• Why they need an in-depth defensive structure

Listen as the TrustedSec Team dives into how this new tool has been used in Red Team engagements, the history behind the technique, and watch as they run a few demos in a lab environment showing how it is being used.