Weaponized video links in Word documents

Products

• Email Security.cloud

Issue/Introduction

A new method for weaponizing video links in Word documents has been confirmed.

See: https://blog.cymulate.com/abusing-microsoft-office-online-video 

Resolution

Symantec is aware of this technique for trying to get malicious content past filters. We have evaluated our service and our current setup should block these types of attacks. Since there are not yet any reported live versions of this attack, a confirmation test has not been completed. Due to this, we are diligently watching for any new outputs of this attack on the internet to test and ensure prevention.