Word and Excel Chat

A new, low-tech, yet highly effective method of clandestine communication is quietly spreading through school campuses, allowing students to bypass traditional messaging restrictions. Educators and IT administrators are discovering that the seemingly innocuous chat features built into Microsoft Word and Excel are being repurposed by students to send secret notes to one another, right under the nose of school monitoring systems.

While schools commonly deploy robust firewalls and content filters to block social media, chat apps, and unauthorized websites, the integrated collaboration tools within popular productivity suites like Microsoft 365 often slip through the cracks. These features, designed for legitimate co-editing and project work, allow users to chat in real-time within a shared document or spreadsheet.

"We first noticed it when a teacher caught two students giggling while 'working' on a shared history project," explained one school IT administrator, who requested anonymity due to the sensitive nature of the discovery. "On closer inspection, their 'edits' were minimal, but the chat pane was filled with rapid-fire messages discussing everything from weekend plans to exam answers. Our usual filters don't flag internal chat within a Word document as 'social media' traffic."

The technique is simple yet ingenious. Students create a new, often meaningless, Word document or Excel spreadsheet, then share it with their intended recipient(s) within the school's network. Once the document is open, they use the built-in chat function (often found in the top right corner, usually with a speech bubble icon) to exchange messages. Because the communication is embedded within a Microsoft application and routed through the school's legitimate network traffic for Microsoft 365 services, it largely goes undetected by standard web filters looking for external chat applications.
​
The messages are typically ephemeral, as the chat history might only persist as long as the document is open or within a recent activity log. However, for quick, real-time exchanges during class, it proves to be a surprisingly effective loophole.

Ep339

Image created by AI