A stealthy new attack distributes Loki malware in Microsoft Excel spreadsheets and other Office applications. The attack, which was discovered by Lastline Labs, is tough to detect in its early stages. It bypasses traditional antivirus and is often dismissed as a false positive because it relies on malicious “scriptlets” that are added to Office files using external links. Loki is designed to take credentials from software including email clients, browsers, FTP clients, file management clients. The malicious files arrive via standard email and display to attackers which websites are vulnerable to identity theft.”]
Source: https://www.darkreading.com/attacks-breaches/microsoft-office-docs-new-vessel-for-loki-malware