top of page

Q/A


Q: Are digitaliziraj.si files safe for sharing through multi-user access points?
A: Yes, the usage of Excel will in no way present a bigger risk or compromise your computer or network.
 

Q: What should we be mindful of?
A: Secured multi-user access points or files being shared within some designated permissions are at risk of unauthorized account access. Keep your passwords or full login credentials secure, and enable two-factor authentication if available.


Q: Can I run digitaliziraj.si files online through the usage of online tools provided by Microsoft?
A: Yes, all digitaliziraj.si products are usable from online Microsoft services, even though they are not designed to operate in such a way.


Q: What is the largest threat when sharing Excel files through multi-user access points?
A: If we are talking about a file you made or got from digitaliziraj.si, the only threat that exists is the threat to your login credentials. Same as with any secure online service.

 


digitaliziraj.si suggestion!
Do not download any file, Excel or otherwise, you do not know the maker of, or if you are unsure it comes from a trustworthy source. Do not be fooled by a stolen logo or the usage of a name you trust; always make sure you know what you are getting.

Summary:
The threat exists with all files found online. Threats to Excel files you get from unverified sources or creators are not greater than those found in malicious software or other files you download from the internet. Files that originate from trusted sources can freely be shared using shared access points. Sharing an Excel file through such applications will not differ from sharing an image or any other file.

Methods of malicious intent available in Excel

Some "experts" would have you believe that just using an Excel file which contains no malicious code can and will somehow put you at risk. To ease your state of mind, we will briefly discuss such methods so that you can see such vulnerabilities are not Excel-specific but are found in all malicious programs or other malicious files you download from the internet. Be extremely careful when downloading any files or programs from the internet; an attacker can target you through images, programs, or links you see online. Having Excel installed and data stored in it will not bring your computer or system at risk by itself, which is what most "experts" are trying to convince their listeners of. Such threats exist for all content available online and are in no way greater with an Excel file than they would be for an image you download and open or a program you download and install. Standard precaution applies.

All methods rely on you downloading a pre-existing Excel file that was made with malicious intent by its creator, as with any other means of delivering and executing a harmful payload on your computer or system. All methods rely on the creator of the file having malicious intent.
Such methods include but are not limited to:

Formula injection (CSV injection)

Excel allows for the usage of Excel code to solve a plethora of problems or meet a vast ocean of demands. Malicious creators can use Excel coding to download and execute harmful code on your computer; the latter is true for any malicious file you download from the internet and open, whether the initial delivery method is an Excel file, an image, or something else. Older versions of Windows, like Windows XP, Vista, and Windows 7, allow for CMD commands to be hidden and easily executed within such function code. Older Excel versions feature even more potential means of delivering and executing a harmful payload. But not more than other delivery methods. We advise the usage of the latest operating system and keeping it updated. It's smart to use the latest Excel version and not versions of Excel that for ten or more years have not received any updates, such as Excel 2003 or Excel 2013, which are still commonly used.

Macro made Malware

Excel, amongst many other tools, allows for expansions to be made using the VBA programming language to expand on the pre-existing capabilities of such programs. Malicious creators can use the Visual Basic for Applications programming language to deliver and execute harmful code on your computer; the latter is true for any malicious programs you install, whether the initial delivery method is an Excel file, executable file, or a program you installed. Such methods are even more sneaky and dangerous in delivering the desired payload on your computer. They can execute their purpose before the user interface even loads up. Same as with other means of delivery where a simple click is enough to execute the malware instantaneously. To shield from such attacks, avoid installing or running executables from unknown or untrustworthy sources. With Excel, specifically use default settings that do not allow for macros to be launched even if included in the file.

Add-ons

Excel allows for more complex features to be added through add-on expansions that rely on a custom-made section of the original user interface. Such add-ons exist in the file itself and are vastly more capable of executing harmful code by themselves than the previous methods, which normally rely on downloading the actually harmful package and act as a tool of delivery. Such add-ons can be stored in the individual file itself and need no additional downloads from Microsoft, where you normally get such expansions. This should serve as a warning that Excel, with its capabilities, allows for almost unlimited programming options and as such, as with any program you install or run on your computer, can perform a majority of harmful actions just by downloading and opening a malicious Excel file.

Older versions

Excel versions that have not been updated in a decade or more specifically Excel  2007 and earlier, possess additional means of delivering harmful code to be executed on your system, an example of that is mallicius code hidden within the Fonts that are part of  every Excel file individually and not Excel as a whole. Update your software to the latest version and fire the so-called "experts" installing twenty year old software on your computers, then claiming some greater security treat and promoting the usage of a much more expensive options. You should not be using software of such age, but regardless if you create your own files to store or manage data without downloading Excel files from the internet and use them, your system will not be at risk from your usage of outdated Excel formats in any way. But always be mindful of all files you download from the internet regardless of your software age.

Keep in mind, Excel by itself will not put you at risk, downloading and opening a file from a Malicius creator will.

addresses: Pameče 108, 2380 Slovenj Gradec, Slovenija

  • LinkedIn
  • Pinterest
  • Youtube
bottom of page