Bugging Microsoft Files: Part 2 – Xlsx Files using Microsoft Excel

As promised in my previous post, part 1, this post shows how to place a tracking bug in a native .xlsx file.  Full credit for this method goes to Colin Edwards (see link at end of post).

The instructions below were made with Microsoft Excel 2013 for Windows.


  1. Open an existing document or create a new one. Choose the Data Menu.
  2. Choose From Web.


  1. Type the address for your tracking bug. You should come up with a unique name for this document so when it is opened later you can tell which document it was. The address should be similar to http://DOMAIN/index.php?id=ID&type=img but you need to replace DOMAIN and ID with your own values. Choose Go to load the URL you entered.
  2. Click the tiny green arrow in the corner. This tells Excel what to read from the page. In this case, the page is blank so we choose the whole thing.


  1. Choose a cell to insert the data. It does not matter where as we will hide the whole sheet later.
  2. Choose Properties.


  1. Check the box next to: Refresh the data when opening the file. This tells Excel to load the tracking bug every time the file is opened.
  2. Choose OK twice.


You will see data in the cell you chose. To hide this:

  1. Choose the + symbol to add a new sheet.
  2. Right-click the sheet where your tracking bug is.
  3. Choose Hide.

You may want to rename the remaining sheet to something more specific.

Save the file and close Excel.

When the spreadsheet is opened, Excel will not automatically trigger the tracking bug. Instead, it will prompt the user with a security message as shown here:


Choosing Enable Content will trigger the tracking bug. Excel will remember this and not ask the next time the same user opens the same document.

Part 1

Part 3


Ready to learn more?

Level up your skills with affordable classes from Antisyphon!

Pay-What-You-Can Training

Available live/virtual and on-demand