1354
“ First , because the malware is disguised as an unassuming Office document , threat actors can often use this technique to bypass the IT department ’s sandbox environments , detection software or analysis tools that help identify malicious documents , attachments and links , ” Belani said .
 an unassuming Office document: trusted entity; the malware: tool; threat actors: attacker; bypass the IT department ’s sandbox environments: purpose
Given event type and trigger, please tell me the arguments of all the listed option. Output format is "name1: role1; name2: role2". 
Event type: phishing 
  Option: victim, attacker, attack pattern, purpose, damage amount, tool, time, place, trusted entity 
Text: {0} 
Answer:
 an unassuming Office document: trusted entity; the malware: tool; threat actors: attacker; bypass the IT department ’s sandbox environments: purpose