Microsoft Clipchamp: New text and shape animations in the video editor

🚨 The Signal: Clipchamp now supports text and shape animations. This feature could be exploited for social engineering, making phishing attempts or malicious content appear more legitimate and engaging, increasing user susceptibility.

The Impact

All users are affected by an increased risk of sophisticated social engineering attacks via animated video content.

• End users: Increased susceptibility to phishing and social engineering via animated video.
• Security teams: New vector to monitor for malicious content distribution.
• Admins: Potential need for updated content governance policies.
• Organisations: Higher risk of data breaches due to enhanced social engineering tactics.

The Action

1. Review and update security awareness training to include risks associated with animated malicious content.
2. Reinforce policies on sharing and opening unsolicited video content, regardless of apparent legitimacy.
3. Monitor for new social engineering tactics leveraging animated content in Clipchamp.
4. Consider content scanning solutions that can analyse video for suspicious elements.

Domain: M365-Apps · Impact: medium · Workload: M365 Apps