Command and Scripting Interpreter: Visual Basic

Threat actors may abuse Visual Basic (VB) for execution. VB is a programming language created by Microsoft with interoperability with many Windows technologies such as Component Object Model and the Native API through the Windows API. Although tagged as legacy with no planned future evolutions, VB is integrated and supported in the .NET Framework and cross-platform .NET Core.

ID: ATAGS-T1046.012
Sub-technique of:  ATAGS-T1046
ⓘ
Tactic: Execution
ⓘ
Targeted Components: Software
ⓘ
Responsibility: Provider
Created: 18 April 2026
Last Modified: 18 April 2026

Mitigations

This type of attack technique cannot be easily mitigated with preventive controls since it is based on the abuse of system features.