Microsoft Left A Hole That Hackers Used To Infect Millions With Malware

Microsoft Word Affected by Critical Office Zero Day Vulnerability Reports McAfee

Microsoft Word Affected by Critical Office Zero Day Vulnerability Reports McAfee

This represents the first malware distribution campaign exploiting the newly discovered Microsoft Word zero-day vulnerability.

McAfee and FireEye posted blogs revealing the attack, which, as these things so often do, starts with a malicious email attachment.

McAfee said "the attacker gains full code execution on the victim's machine".

As the means through which cyber-attackers stole more than £20 m, it had been mentioned in 2015. It will then proceed to download even more malicious payloads across various "well-known malware families", subsequently closing the original Word file that was weaponized for the attack. It even shows a fake Word document to hide the attack from the victim. The root cause lies in an important Office feature known as Object Linking and Embedding (OLE). The security researchers who discovered this vulnerability say that it is different from other Word exploits seen in the past because it does not require the user to enable Macros.

A Microsoft spokesperson has confirmed that the company will offer a patch to rectify the issue, which will be available on Tuesday as part of the software giant's monthly release of updates. They further added, "In the background, the malware has already been furtively installed on the system of the victim".

Myles Garrett will 'punish' Browns if not taken No. 1
McFarland, a former defensive lineman for LSU who primarily works for ESPN's SEC Network, was not thrilled. He is widely viewed as the best running back in this class and one of the top overall prospects.

McAfee told users not to open any Office files obtained from untrusted sources, especially from emails.

Security researchers at FireEye said that they also recently detected malicious Microsoft Office Rich Text Format (RTF) documents that leverage a previously undisclosed vulnerability.

A hole in Microsoft's defenses, in general, is bad enough, but a malware that can infect users using every supported version of the MS Office products is just devastating. "As Microsoft Office is an extensively used productivity suite on Windows desktop computers, this actively attacked vulnerability poses a big concern", said Amol Sarwate, director of Engineering at Qualys, in an email sent to eWEEK.

McAfee said it identified the attacks on Thursday and chose to release its advisory immediately, which appeared late on Friday. Also, the attack can not bypass the Protected View in Word, so McAfee suggested enabling this view mode when opening documents just to be sure. An agreement was made to release information about the vulnerability only after a patch was devised. To enable Office Protected View in your application, launch Microsoft Word.

Recommended News

  • Trump tells newspaper Obama aide might have broken the law

    Schiff has declined to comment on the contents of the documents, while Nunes has said they caused him concern. These names are usually redacted or even given vague descriptors like "Male 1".

    Ian Wright blasts Arsenal stars after Palace loss: 'At least I tried!'

    Theo Walcott certainly knows how the supporters feel after admitting they once again let them down against Palace. AW: Yeah, unfortunately at the moment it is like that and we have to respond very quickly and not accept it .
    'Mowgli girl' not raised by monkeys, wasn't naked when recovered, claim cops

    'Mowgli girl' not raised by monkeys, wasn't naked when recovered, claim cops

    This indicates that she was raised by humans. "So it was taken that she had been living in the jungle for long", he said. It was not immediately clear from where the girl went missing and if the family had sought police help to trace her.
  • New York lawmakers approve free middle class college tuition

    New York lawmakers approve free middle class college tuition

    Cuomo's office said 940,000 families are eligible for the benefit, but a legislative analysis said it would be closer to 32,000 . However, they will be responsible for costs of room and board and other fees, if they choose to live on campus.

    Obama, Merkel will meet in Germany during Trump's trip to Europe

    Obama and German Chancellor Angela Merkel enjoyed a drink together during the former President's 2013 trip to Berlin . The discussion is being organized jointly by the conference, which is held every two years, and the Obama Foundation.
    City of Powell River presents Easter egg hunt

    City of Powell River presents Easter egg hunt

    On Easter Sunday, the Brownsville Community Church Team has organized an Easter Egg Hunt open to all children in the community. There were zones marked off for five age groups up to sixth grade and, in total, about 800 colored plastic eggs.
  • Toshiba's survival in doubt amid Westinghouse troubles

    Toshiba's survival in doubt amid Westinghouse troubles

    President Satoshi Tsunakawa speaks during a press conference at the company's headquarters in Tokyo, Tuesday, April 11, 2017. The projected loss ballooned because of losses related to Westinghouse's bankruptcy filing last month, the company said.

    Markey to Trump: Negotiate with Kim Jong Un

    Seoul time from a site in the vicinity of Sinpo, South Hamgyong province, a South Korean Defense Ministry official said. The post North and South Korea women face off in Pyongyang football match appeared first on Vanguard News.

    Jose Mourinho attacks his players after 1 - 1 draw with Everton

    Burnley has seven games left but already has two more points than the 33 the team earned two seasons ago, when it was relegated. United continued to dominate possession, but Romelu Lukaku, Kevin Mirallas and Ross Barkley looked unsafe on the break.
  • US, Canada and Mexico confirm joint 2026 World Cup hosting bid

    US, Canada and Mexico confirm joint 2026 World Cup hosting bid

    Mexico will push to kick off the 32-day tournament at the Azteca Stadium in Mexico City, which hosted the final in 1970 and 1986. All Iraq's "home" games in 2018 World Cup qualifying have been played in neutral Iran or Malaysia.

    Lewis Hamilton coasts to fifth title at Chinese Grand Prix

    Two lap later proper safety vehicle was out after Antonio Giovinazzi suffered his second heavy crash. Yeah, he really squeezed me, but it was good fun and I had the inside for the next corner".
    Mohan Bhagwat seeks nationwide ban on cow slaughter, says violence 'defames' cause

    Mohan Bhagwat seeks nationwide ban on cow slaughter, says violence 'defames' cause

    Chief Mohan Bhagwat today proposed the idea of a nationwide ban on cow slaughter. "It is impossible", he said. At least four people have been arrested so far and the police are looking for 10 more alleged cow vigilantes.

We are pleased to provide this opportunity to share information, experiences and observations about what's in the news.
Some of the comments may be reprinted elsewhere in the site or in the newspaper.
Thank you for taking the time to offer your thoughts.