What about a case where the malware originates in a system like Windows? That is, the originator created the document on a Windows machine where an infection has snuck in, and the document is then opened in the Mac version of Word. Is that malware going to be executed on the Mac and, even if not, can it somehow be a pain in the rear just due to its presence?
A VBA macro is platform independent. In other words it can run on Mac or Windows. Whether it can actually
infect the Mac or not, depends on the inventiveness of the malware writer. It could...
- have no effect on the Mac
- have no effect on the Mac per se but infect other Office files and thereby be in a position to being passed along to Windows users the Mac user might share files with.
- Import a piece of malware from the internet that could infect the Mac.
- be very annoying when using Office apps
- might not be a VBA Macro at all but an executable that runs when the file is opened and is unaffected by preventing Macros from running.
THE FACTS ARE:- VBA macros are "old school" malware technology but there are still exploits in the wild which still constitute a risk,
- this is NOT the distribution vector used by the latest and most destructive malware.
- the latest and most destructive exploits are distributed using "human factors engineering" tactics that rely on human cupidity, gullibility, and complacency.
- any vulnerability in the hardware, OS, or apps can be exploited in ways that most of us could or would never envision.
- the best anti-malware apps can do is detect the digital signature of KNOWN malware
- the best protection against malware is threefold
- Keep the OS and apps scrupulously up to date
- Remain suspicious at all times and always err on the side of caution.
- Never become complacent
- While Catalina's plethora of "Do you want to grant…" questions and frequent trips to System Preferences > Security & Privacy > Privacy to grant apps access to specific resources can be annoying they do accomplish the goal of making the user THINK about what they are doing.
- You are better off safe than sorry.
