Which type of malware infects Microsoft Office files by exploiting macros?

Which type of malware infects Microsoft Office files by exploiting macros?

• A. Trojan Horse
• B. Macro Virus
• C. Ransomware
• D. Worm

Answer: (B)

This question focuses on how some malware uses Office macros as the infection method. Macros in Microsoft Office are small programs written in VBA that can automate tasks inside Word, Excel, and other Office apps. A Macro Virus hides malicious code inside these documents and relies on enabling the macro feature to run. When a user opens an infected document and enables macros (often through social engineering or a misleading attachment), the malicious macro executes and can alter the document, drop additional payloads, or replicate to other Office files and templates. This specific technique—embedding malicious code in Office documents and executing it via macros—is what defines a Macro Virus. The other types describe different kinds of threats that don’t hinge on exploiting macros in Office files. A Trojan Horse conceals itself as legitimate software, a Ransomware attack encrypts files to demand payment, and a Worm self-replicates across systems or networks. The distinctive trait here is the macros-based infection vector. To mitigate this, keep macros disabled by default, use trusted sources, and enable protections like Protected View and digital signatures.

This question focuses on how some malware uses Office macros as the infection method. Macros in Microsoft Office are small programs written in VBA that can automate tasks inside Word, Excel, and other Office apps. A Macro Virus hides malicious code inside these documents and relies on enabling the macro feature to run.

When a user opens an infected document and enables macros (often through social engineering or a misleading attachment), the malicious macro executes and can alter the document, drop additional payloads, or replicate to other Office files and templates. This specific technique—embedding malicious code in Office documents and executing it via macros—is what defines a Macro Virus.

The other types describe different kinds of threats that don’t hinge on exploiting macros in Office files. A Trojan Horse conceals itself as legitimate software, a Ransomware attack encrypts files to demand payment, and a Worm self-replicates across systems or networks. The distinctive trait here is the macros-based infection vector. To mitigate this, keep macros disabled by default, use trusted sources, and enable protections like Protected View and digital signatures.