Previous versions of Office include a warning when opening documents that contain macros, but malware authors have become more resilient in their social engineering tactics, luring users to enable macros in good faith and ending up infected. The enduring appeal for macro-based malware appears to rely on a victim’s likelihood to enable macros. To learn more about Advanced Threat Protection and other security features in Office 365, check out this blog and video. Note these are detections and not necessarily successful infections. In the enterprise, recent data from our Office 365 Advanced Threat Protection service indicates 98% of Office-targeted threats use macros. We featured macro-based malware in our Threat Intelligence report last year, but infections are still increasing.ĭespite periodic lulls, infections for the top 20 most detected macro-based malware were high over the past three months. Macro-based malware infection is still increasing To help counter this threat, we are releasing a new feature in Office 2016 that blocks macros from loading in certain high-risk scenarios. Macro-based malware is on the rise and we understand it is a frustrating experience for everyone. Office VBA + AMSI: Parting the veil on malicious macros This is part of our continued efforts to tackle entire classes of threats. Office 365 client applications now integrate with AMSI, enabling antivirus and other security solutions to scan macros and other scripts at runtime to check for malicious behavior.
0 kommentar(er)
