In two blogs this week, researchers at Trustwave detail how threat actors are abusing OneNote. But malicious OneNote files can deliver threatening packages. xlsx files, OneNote doesn’t support VBA macros. When an unwitting employee clicks on the attachment to see the document, the macro runs silently in the background and leads to an infection.īut as Microsoft tightens security around macros, and email gateways look for and flag documents with macros, threat actors have found a new way to evade defences: Leveraging Microsoft OneNote’s ability to embed files to deliver malware.

Artificial Intelligence (918) Auto Tech (47) Blockchain (173) CanadianCIO (96) Careers & Education (4433) Channel Strategy (35) Cloud (2084) Communications & Telecom (420) Companies (1047) Data & Analytics (1297) Development (736) Digital Transformation (1233) Distribution (126) Diversity & Inclusion (66) Ecommerce (91) Emerging Tech (24217) End User Hardware (50) Engineering (79) Financial (164) FinTech (86) Future of Work (347) Governance (106) Government & Public Sector (6081) Human Resources (861) Infrastructure (8522) IoT (6174) ITWC Morning Briefing (129) Leadership (4287) Legal (162) Legislation (167) Managed Services & Outsourcing (4312) Marketing (61) MarTech (3) Medical (31) Mobility (3429) Not For Profit (23) Open Source (30) Operations (85) People (149) Podcasts (2120) Privacy (641) Project Management (1099) Security (8013) Service (44) Smart Home (18) SMB (59) Social Networks (203) Software (4167) Supply Chain (122) Sustainability (108) Tech in Sports (5) Women in Tech (188)įor years, threat actors have been hiding macros in emailed Microsoft Office documents as a way to deliver malware.

Onenote shared document