Last week, we published a blog post that explained how attackers can abuse Microsoft's Dynamic Data Exchange (DDE) feature to launch malware without tricking users into enabling macros.
Article Link: https://blog.barkly.com/locky-ransomware-using-microsoft-office-dde-exploit