Page 1 of 2 12 LastLast
  1.    15 Jun 2016 #1
    Join Date : Oct 2014
    In a house with a crazy cat trying to kill me
    Posts : 16,237
    Win 7 32, Win 7 64 Pro, Win 8.1 64 Pro, Win 10 64 Education Edition

    Donít run JavaScript email attachments: ​can carry potent ransomware


    Attackers are infecting computers with a new ransomware program called RAA thatís written entirely in JavaScript and locks usersí files by using strong encryption.
    Attackers have taken to this technique in recent months, with Microsoft warning about a spike in malicious email attachments containing JavaScript files back in April. Last month, security researchers from ESET warned of a wave of spam that distributes the Locky ransomware through .js attachments.
    It is very uncommon for people to send legitimate applications written in JavaScript via email, so users should avoid opening this type of file, even if itís enclosed in a .zip archive. There are few reasons for .js files to exist outside websites and Web browsers in the first place.
    Don't run JavaScript email attachments: they can carry potent ransomware | PCWorld
      My ComputerSystem Spec
  2.    15 Jun 2016 #2
    Join Date : Aug 2015
    Australia
    Posts : 18
    Windows 10 64-bit

    If you don't recognize the source or the person who is sending you the attachment doesn't usually do so, don't open the attachment. Whether its a JavaScript attachment or an office program, any attachment really- I feel that should preface all of these articles.
      My ComputerSystem Spec
  3.    15 Jun 2016 #3
    Join Date : Aug 2015
    Posts : 824
    Win10/64 Pro 1511 (and 2 Win 7/64 Ult & Pro systems)

    ^^ Excellent advice in both posts. ^^

    I'll take it one step further to suggest: even if you DO know the sender, be careful of any attachment.

    Both friends and work colleagues have been hacked from time to time over the years, and their emails "spoofed".

    So, in addition to multiple layers of email security before any message (or its attachments) ever gets to my system, I typically scan EVERY attachment even if I know the sender and I "expect" the file.

    Cheers,
    MM
      My ComputerSystem Spec
  4.    15 Jun 2016 #4
    Join Date : Jul 2015
    Poole Dorset UK
    Posts : 2,556
    Windows 10 x64 Home Version(1709) Build16299.19

    I myself don't like java script and only used it back in the old days
      My ComputerSystem Spec
  5.    15 Jun 2016 #5
    Join Date : Nov 2015
    Posts : 4,814
    windows 10 Home threshold2

    Thanks for the warnings.
      My ComputerSystem Spec
  6.    15 Jun 2016 #6
    Join Date : Sep 2015
    Cosmos
    Posts : 103
    Windows 10 Home 64bit V1607

    No more Java for me since Windows 7...but good to know.
      My ComputerSystem Spec
  7.    15 Jun 2016 #7
    Join Date : Aug 2015
    Posts : 824
    Win10/64 Pro 1511 (and 2 Win 7/64 Ult & Pro systems)

    Hi, @galaxys:

    Quote Originally Posted by galaxys View Post
    No more Java for me since Windows 7...but good to know.
    "Java" and "Javascript" are not the same thing.

    But your approach is a good one.
    Few websites and (probably) fewer programs need JRE (aka "Java") these days.

    The safest way to proceed is to fully uninstall all versions of Java from the Windows Control Panel, perhaps even using a tool, such as JavaRa (note: version 1.6 seems to work better than the current release build). Having outdated versions and remnants on the system can create security vulnerabilities.

    If you end up needing to reinstall it, the ONLY safe place to get it is from the link here.
    Be sure to opt-out (un-check/un-tick) any "freebies" that may be offered during the setup wizard, and it's vitally important to keep it fully updated with the current version (because of the previously mentioned security problems).
    BTW, Merely disabling Java does not fully mitigate those vulnerabilities, even if you have the most current version.
    So, you're right, if you don't need it, get rid of it.

    As far as *javascript* is concerned, there are many browser extensions and security products to help secure your browsers and computer system from *javascript* vulnerabilities, which are different from *java* ("JRE").

    Cheers,
    MM
      My ComputerSystem Spec
  8.    15 Jun 2016 #8
    Join Date : Sep 2015
    Cosmos
    Posts : 103
    Windows 10 Home 64bit V1607

    Thanks for the additional insight MM! I'll stay away from both those badboys!
    Last edited by galaxys; 16 Jun 2016 at 12:09. Reason: sp
      My ComputerSystem Spec
  9.    16 Jun 2016 #9
    Join Date : Jul 2015
    Posts : 859
    Windows 10 Home x64

    A friend of mine got infected by Cryptolocker this way.
      My ComputerSystem Spec
  10.    16 Jun 2016 #10
    Join Date : Jul 2015
    Posts : 149
    Windows 10 Pro x64

    TLR - don't open emails you don't know or trust the look of!
      My ComputerSystem Spec

 
Page 1 of 2 12 LastLast


Similar Threads
Thread Forum
Combining 2 separate attachments into same email?
AV; Windows Media Player; Adobe Reader; Adobe flash Player] Hello, someone emailed me 3 photo attachments as Photo Gallery (Slide Show). I wrote a letter on the same email with the 3 photos to send someone else. But they emailed me 2 more in...
General Support
Solved Help with email attachments arriving blank?
Today in emails, when opening up links to documents, the document pages come up empty, without any words but with the lines, boxes and formatting and logo at top of page. What is being blocked here and what have I accidentally clicked on to...
Software and Apps
Solved Email attachments trigger Internet Explorer error
Looking for advice on how to correct this problem. I have Live Mail on my Dell desk top. When I installed Windows 10 everything was working. Now when I click on an Email attachment I get a message that tells me that Internet Explorer has closed...
Browsers and Email
Win 10 and email attachments
Like everyone else, I upgraded to Win 10. When I open email attachments using Outlook 2013 or the Outlook App, I cannot open them even if there are .docx files. Specifically, when I click once on the attachment I get " this file cannot be...
Browsers and Email
Does Win8 Pro Retail licence carry over to Win10 Pro upgrade?
Gday all Trying to get my situation sorted. I have just upgraded my Win 8 Pro Retail version. Everything has gone smooth touch wood. Being a retail license, I can use this copy on one machine at any time. ie I build a new machine I still...
Windows Updates and Activation
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 13:01.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums