XLM + AMSI: New runtime defense against Excel 4.0 macro malware

%3CLINGO-SUB%20id%3D%22lingo-sub-2194591%22%20slang%3D%22en-US%22%3EXLM%20%2B%20AMSI%3A%20New%20runtime%20defense%20against%20Excel%204.0%20macro%20malware%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2194591%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%20class%3D%22TextRun%20%20BCX8%20SCXW97772054%22%20data-contrast%3D%22auto%22%3E%3CSPAN%20class%3D%22NormalTextRun%20%20BCX8%20SCXW97772054%22%3ETo%20better%20protect%20Microsoft%20365%20customers%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20%20BCX8%20SCXW97772054%22%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3Eagainst%20malicious%20macro-based%20threats%2C%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20%20BCX8%20SCXW97772054%22%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20%20BCX8%20SCXW97772054%22%3Ew%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20%20BCX8%20SCXW97772054%22%3Ee%20have%20recently%20expanded%20the%20integration%20of%20Antimalware%20Scan%20Interface%20(AMSI%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22TextRun%20%20BCX8%20SCXW97772054%22%20data-contrast%3D%22auto%22%3E%3CSPAN%20class%3D%22NormalTextRun%20%20BCX8%20SCXW97772054%22%3E)%20with%20Office%20365%20to%20include%20the%20runtime%20scanning%20of%20Excel%204.0%20(XLM%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22TextRun%20%20BCX8%20SCXW97772054%22%20data-contrast%3D%22auto%22%3E%3CSPAN%20class%3D%22NormalTextRun%20%20BCX8%20SCXW97772054%22%3E)%20macros%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20%20BCX8%20SCXW97772054%22%3E.%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20%20BCX8%20SCXW97772054%22%3EThis%20integration%2C%20an%20example%20of%20the%20many%20security%20features%20released%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20%20BCX8%20SCXW97772054%22%3Efor%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20%20BCX8%20SCXW97772054%22%3EMicrosoft%20365%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20%20BCX8%20SCXW97772054%22%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20%20BCX8%20SCXW97772054%22%3EApps%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20%20BCX8%20SCXW97772054%22%3Eon%20a%20regular%20basis%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20%20BCX8%20SCXW97772054%22%3E%2C%20reflects%20our%20commitment%20to%20continuously%20increase%20protection%20for%20Microsoft%20365%20customers%20against%20the%20latest%20threats.%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22TextRun%20%20BCX8%20SCXW97772054%22%20data-contrast%3D%22auto%22%3ELearn%20all%20about%20how%20th%3C%2FSPAN%3E%3CSPAN%20class%3D%22TextRun%20%20BCX8%20SCXW97772054%22%20data-contrast%3D%22auto%22%3E%3CSPAN%20class%3D%22NormalTextRun%20%20BCX8%20SCXW118322363%22%3Ee%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20%20BCX8%20SCXW118322363%22%3EAMSI%20and%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20%20BCX8%20SCXW118322363%22%3EXLM%20work%20together%20to%20keep%20Microsoft%20365%20customers%20better%20protected%20against%20malicious%20macro-based%20threats%20in%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fwww.microsoft.com%2Fsecurity%2Fblog%2F2021%2F03%2F03%2Fxlm-amsi-new-runtime-defense-against-excel-4-0-macro-malware%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ethis%20blog%3C%2FA%3E!%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2194591%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EMicrosoft%20365%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMicrosoft%20Defender%20for%20Endpoint%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Community Manager

To better protect Microsoft 365 customers against malicious macro-based threats, we have recently expanded the integration of Antimalware Scan Interface (AMSI) with Office 365 to include the runtime scanning of Excel 4.0 (XLM) macros. This integration, an example of the many security features released for Microsoft 365 Apps on a regular basis, reflects our commitment to continuously increase protection for Microsoft 365 customers against the latest threats.

 

Learn all about how the AMSI and XLM work together to keep Microsoft 365 customers better protected against malicious macro-based threats in this blog!

0 Replies