I'm running Office 2016 on Windows 10, fully patched. Now working on hardening Office to make sure that users cannot make insecure decisions when they receive malicious files.
Template injection works pretty well and was used in the past in hacks. Using publicly available tools it's easy to get the attack working in under 10 minutes, stealing network credentials from users that open the file. However I cannot find any technical mitigation technique... See e.g. https://attack.mitre.org/techniques/T1221/ for details.
Question: how to fix this issue? And in such a way that local SMB templates on shares (\\mycompany\documents\templates) *can* be opened and remote https shares (https://attacker.com/maliciousstuff) will be blocked.
