Hackers can abuse Microsoft Office executables to download malware

The list of LOLBAS files – legitimate binaries and scripts present in Windows that can be abused for malicious purposes, will soon include the main executables for Microsoft’s Outlook email client and Access database management system. The main executable for the Microsoft Publisher application has already been confirmed that it can download payloads from a remote server.