Microsoft has announced that it will begin phasing out VBScript by the second half of 2024, eventually removing it completely. VBScript will be available as a feature on demand until it is fully removed. This decision comes as technology has evolved, offering more powerful scripting languages like JavaScript and PowerShell which are better suited for modern web development and automation tasks.
The deprecation plan for VBScript consists of three phases. In the first phase, VBScript will be enabled by default as an optional feature in Windows 11 24H2 starting in the second half of 2024. The second phase will begin around 2027, during which VBScript will still be available on demand but not preinstalled. The final phase will see VBScript retired and removed from future Windows versions, rendering all VBScript projects obsolete.
This move to deprecate VBScript is part of a broader strategy to remove Windows and Office features that can be exploited by threat actors to deliver malware. VBScript has been used in malware campaigns, including strains like Lokibot, Emote, Qbot, and DarkGate malware. In fact, Microsoft disabled VBScript by default in Internet Explorer 11 on Windows 10 back in 2019 to mitigate these security risks.
Microsoft’s efforts to enhance security also include actions like expanding support for its anti-malware scanning interface (AMSI) to Office 365 applications. This has helped prevent attacks using Office VBA macros. Additionally, Microsoft has disabled Excel 4.0 macros by default, blocked untrusted XLL plugins, and implemented other security measures to protect users against malicious code.
Overall, Microsoft’s decision to deprecate VBScript is part of a proactive approach to improve security and protect users from malware threats. By transitioning to more efficient scripting languages and removing outdated features like VBScript, Microsoft aims to create a safer computing environment for its users.
Article Source
https://www.bleepingcomputer.com/news/microsoft/microsoft-to-start-killing-off-vbscript-in-second-half-of-2024/