XLM + AMSI: New runtime defense against Excel 4.0 macro malware - Microsoft Security


  • Office 365 Threat Research Team
  • Microsoft 365 Security
  • Microsoft 365 Defender Research Team


We have recently expanded the integration of Antimalware Scan Interface (AMSI) with Office 365 to include the runtime scanning of Excel 4.0 (XLM) macros, to help antivirus solutions tackle the increase in attacks that use malicious XLM macros. This integration, an example of the many security features released for Microsoft 365 Apps on a regular basis, reflects our commitment to continuously increase protection for Microsoft 365 customers against the latest threats.