Ransomware targets corporate Office 365 users in 0-day campaign

It’s 2016, and Microsoft Office macros are still a viable infection vector: security outfit Avanan says it’s spotted a week-long, large-scale malware attack against Office 365 users.

The campaign began on June 22, and Microsoft started blocking the malicious attachment on June 23.

Avanan says the attackers tried to send messages to 57 per cent of the organisations on its security platform using Office 365. Users were sent an Office document that invoked the malware via macros.