Malware News Microsoft Office Macros Are Behind 45% of All Delivered Malware Payloads

[509322]

This is the key. Usually - I find - consumers don't use things like Adobe and Microsoft Office. Openoffice, WPS and Libreoffice are far more common from what I have seen. In fact, we just assisted with a project for a rather large firm using Openoffice. Also keep in mind the migration from SBS/Exchange over to 365, and the vast majority of those users will be using the web apps, which virtually eliminates the threat vector from these things.

I'm actually questioning the validity of even testing such threats anymore.

I just think it is hilarious that some people won't use a security soft because it fails some test against weaponized documents or a bypass\exploit of some program that the person doesn't even use. This behavior is really common on the security forums.

 

[cruelsister]

I know a developer who thinks that PCMag and Rubenking are absolutely awesome

Just goes to prove that God creates both Insects and Fools in numbers beyond imagining...

 

[Quassar]

Definity is more than half i just love how creater imagine myself numbers just for write news for web usage for readers... its remind me results like in AV-Compratives where all av have almlost 100% and no1 1 even is belove 75-80% xD
and ofc some soft peoples for sure belive in this test and aplauze for hiself Antivirus company

 

[509322]

Don't use Microsoft Office. It is as simple as that. Problem solved.

Don't enable macros. It is as simple as that. Problem solved.

 

[Eddie Morra]

Microsoft Office (web-based version) is free if you have a free Microsoft Outlook account. This is fine if you do not need more complicates features.

Google Docs is also free.

 

[Quassar]

Hmm best way is use M$ Office 2010 portable in virtual system or sandbox...
Simple fast and enought secure ^^

This version 2016 install slower and werid than stand alone full system......

 

[shmu26]

The problem with the default MS Office setting for macros is that it is easily disabled. Weaponized docs will usually display easy-to follow instructions on how to allow macros, and will bait the user into doing it.
This trick won't work on a security geek, but it might very well work on the security geek's family member.
So if you have MS Office, you should also have OSA or some other solution that keeps scripts under control.

 

[cruelsister]

Shmu- The most I have ever saw was a "you must enable macros to view this document". And as the typical Home user wouldn't know the Trust Center if it smacked them in the face they will not know HOW to enable Macros.

The default settings is fine- a person will have to go way out of their way to be prone to such malware (Methinks that some doth Protest too Much).

 

[shmu26]

Shmu- The most I have ever saw was a "you must enable macros to view this document". And as the typical Home user wouldn't know the Trust Center if it smacked them in the face they will not know HOW to enable Macros.

The default settings is fine- a person will have to go way out of their way to be prone to such malware (Methinks that some doth Protest too Much).

They have an arrow pointing to how to enable the macro. It's not hard, a noob can do it, as long as he is curious to see the contents of the doc.