Hackers are attacking Word users with new Microsoft Office zero-day

  1. Borg 386's Avatar
    Posts : 22,018
    Win 7 32, Win 7 64 Pro, Win 8.1 64 Pro, Win 10 64 Education Edition
       10 Apr 2017 #1

    Hackers are attacking Word users with new Microsoft Office zero-day


    The bug affects all supported versions of Microsoft Word, but will be fixed this week.

    Attackers are exploiting a previously undisclosed vulnerability in Microsoft Word, which security researchers say can be used to quietly install different kinds of malware -- even on fully-patched computers.

    Unlike most document-related vulnerabilities, this zero-day bug that has yet to be patched doesn't rely on macros -- in which Office typically warns users of risks when opening macro-enabled files.

    Instead, the vulnerability is triggered when a victim opens a trick Word document, which downloads a malicious HTML application from a server, disguised to look like a Rich Text document file as a decoy. The HTML application meanwhile downloads and runs a malicious script that can be used to stealthily install malware.
    A Microsoft spokesperson confirmed that the company will issue a fix for the bug on Tuesday as part of its monthly release of security fixes and patches.
    Hackers are attacking Word users with new Microsoft Office zero-day vulnerability | ZDNet
      My ComputerSystem Spec

  2.    10 Apr 2017 #1

    This is yet another reason why you pay close attention to received files and links. NEVER open anything suspicious!
      My ComputerSystem Spec

  3. magilla's Avatar
    Posts : 2,018
    Windows 10 and windows insider
       10 Apr 2017 #2

    Saw this on ZDNET this morning. Never seem safe anymore! Always be on the lookout for anything suspicious - may be malicious.
      My ComputerSystem Spec

  4.    10 Apr 2017 #3

    magilla said: View Post
    Saw this on ZDNET this morning. Never seem safe anymore!
    Use Notepad instead :)
      My ComputerSystem Spec

  5. Borg 386's Avatar
    Posts : 22,018
    Win 7 32, Win 7 64 Pro, Win 8.1 64 Pro, Win 10 64 Education Edition
    Thread Starter
       12 Apr 2017 #4

    Microsoft patches Word zero-day booby-trap exploit


    Microsoft Tuesday patched a previously undisclosed Word zero-day vulnerability attackers used to install a variety of malware on victims’ computers.
    Microsoft patches Word zero-day booby-trap exploit Naked Security
      My ComputerSystem Spec

  6. TairikuOkami's Avatar
    Posts : 3,481
    Home 1809 x64 10.0.17763.165
       12 Apr 2017 #5

    WSH, cough, WSH. By simply disabling WSH , you can disable sooo much malware, without AV.

    reg add "HKLM\Software\Microsoft\Windows Script Host\Settings" /v "Enabled" /t REG_DWORD /d "0" /f

    The .hta content is disguised as a normal RTF file to evade security products, but we can find the malicious Visual Basic scripts in a later part of the file:
      My ComputerSystem Spec


 

Related Threads
Read more: Yahoo warning users that hackers forged cookies to access accounts | ZDNet
why if I do a windows search for files and I insert READ*.* , the intent is to find files starting with READ, but the search returns a long list of files many not starting with READ Can you help
Microsoft Office 2010 prob with word in Microsoft Office and 365
Good evening to all at W10 forum. I have office 2010 on my windows 10 desktop,ZooStorm one recently bought. Now the problem is with word when I go and type a document then go to file to save as a annoying box comes on screen asking me to click yes...
Word Not in Microsoft Office Folder in Microsoft Office and 365
Hello, I'm running Windows 10 64-bit and noticed one day when opening my start menu to open up word that in the programs list (now called "all apps" for some reason) the launcher for Microsoft Office 2013 Word wasn't in the folder labeled...
I have repeated a Clean Reinstall and Install of Office 365 twice trying to remedy this problem without success. I have an Excel Workbook file and a Word File saved with password protection. After opening them I can make changes however when I...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 03:57.
Find Us