New Blog Post | XLM + AMSI: New runtime defense against Excel 4.0 macro malware

%3CLINGO-SUB%20id%3D%22lingo-sub-2182473%22%20slang%3D%22en-US%22%3ENew%20Blog%20Post%20%7C%20XLM%20%2B%20AMSI%3A%20New%20runtime%20defense%20against%20Excel%204.0%20macro%20malware%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2182473%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fwww.microsoft.com%2Fsecurity%2Fblog%2F2021%2F03%2F03%2Fxlm-amsi-new-runtime-defense-against-excel-4-0-macro-malware%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EXLM%20%2B%20AMSI%3A%20New%20runtime%20defense%20against%20Excel%204.0%20macro%20malware%20-%20Microsoft%20Security%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EAuthor(s)%3A%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CUL%20class%3D%22authors%22%3E%0A%3CLI%20class%3D%22author-item%22%3E%3CSPAN%20class%3D%22author-name%20x-hidden-focus%22%3EOffice%20365%20Threat%20Research%20Team%3C%2FSPAN%3E%3C%2FLI%3E%0A%3CLI%20class%3D%22author-item%22%3E%3CSPAN%20class%3D%22author-name%22%3EMicrosoft%20365%20Security%3C%2FSPAN%3E%3C%2FLI%3E%0A%3CLI%20class%3D%22author-item%22%3E%3CSPAN%20class%3D%22author-name%22%3EMicrosoft%20365%20Defender%20Research%20Team%3C%2FSPAN%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22JasonCohen1892_0-1614796077403.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F260590iD689DEF9FD4C22FF%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22JasonCohen1892_0-1614796077403.png%22%20alt%3D%22JasonCohen1892_0-1614796077403.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EWe%20have%20recently%20expanded%20the%20integration%20of%20Antimalware%20Scan%20Interface%20(%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows%2Fwin32%2Famsi%2Fantimalware-scan-interface-portal%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EAMSI%3C%2FA%3E%3CSPAN%3E)%20with%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22brand%22%3EOffice%20365%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3Bto%20include%20the%20runtime%20scanning%20of%20Excel%204.0%20(%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fsupport.microsoft.com%2Fen-us%2Foffice%2Fworking-with-excel-4-0-macros-ba8924d4-e157-4bb2-8d76-2c07ff02e0b8%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EXLM%3C%2FA%3E%3CSPAN%3E)%20macros%2C%20to%20help%20antivirus%20solutions%20tackle%20the%20increase%20in%20attacks%20that%20use%20malicious%20XLM%20macros.%20This%20integration%2C%20an%20example%20of%20the%20many%20security%20features%20released%20for%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22brand%22%3EMicrosoft%20365%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3BApps%20on%20a%20regular%20basis%2C%20reflects%20our%20commitment%20to%20continuously%20increase%20protection%20for%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22brand%22%3EMicrosoft%20365%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3Bcustomers%20against%20the%20latest%20threats.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2182473%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMicrosoft%20365%20Defender%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMicrosoft%20Defender%20for%20Endpoint%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESecurity%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EThreat%20Protection%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Microsoft

XLM + AMSI: New runtime defense against Excel 4.0 macro malware - Microsoft Security

Author(s):

  • Office 365 Threat Research Team
  • Microsoft 365 Security
  • Microsoft 365 Defender Research Team

JasonCohen1892_0-1614796077403.png

We have recently expanded the integration of Antimalware Scan Interface (AMSI) with Office 365 to include the runtime scanning of Excel 4.0 (XLM) macros, to help antivirus solutions tackle the increase in attacks that use malicious XLM macros. This integration, an example of the many security features released for Microsoft 365 Apps on a regular basis, reflects our commitment to continuously increase protection for Microsoft 365 customers against the latest threats.

0 Replies
www.000webhost.com