Improvements Microsoft has made to Office document security that disable macros and other embedded malware by default has forced criminals to up their innovation game, a security expert said Monday.

These file-conversion tools can be especially devious since they work as advertised, successfully converting a file into the desired format. But they pair the converted file with a program designed to ...