
Bad actors send macros in Office files to end users who unknowingly enable them, malicious payloads are delivered, and the impact can be severe including malware, compromised identity, data loss, and remote access,” the company explained.

While we provided a notification bar to warn users about these macros, users could still decide to enable the macros by clicking a button. “For years Microsoft Office has shipped powerful automation capabilities called active content, the most common kind are macros. Microsoft says that this change should help to protect Windows users from malware distributed via phishing attacks, such as TrickBot, Emotet, Dridex, and Qbot. Users will need to click the prompt to read instructions on how to enable the macros in the downloaded file manually. The Redmond giant has already started restricting Excel 4.0 (XLM) macros, and this change will now impact all VBA macros in Word, PowerPoint, Visio, Access, and Excel files.īy default, Microsoft Office apps will prevent users from enabling enable (VBA) macros by simply clicking a button. With this change, the apps will replace the “Enable Content” option with a new “Learn More” prompt. If opening the Developer tab and clicking a button is a little too much work, you can also open the editor with the keyboard shortcut Alt+F11, which works whether the Developer tab is enabled or not.Microsoft is finally getting ready to block Visual Basic for Applications (VBA) macros downloaded from the internet by default in several Office apps. The Developer tab will now appear on the Ribbon and from it you can open the Visual Basic Editor.

Visual Basic for Applications (VBA for short) is a handy way to automate Microsoft Office tasks and is a favorite of many Word and Excel power users.
