VBA

A macro language in Office documents, abused to deliver malware.

VBA is the macro language embedded in Office documents that attackers abuse to deliver malware when a user enables macros in a weaponized file. Phishing campaigns commonly rely on malicious VBA to download payloads or establish persistence. Defenses include disabling macros by default, blocking macros from files originating on the internet, and user awareness. It is a recurring exam example of how trusted productivity applications become an initial access vector through embedded code.