Attackers, for years, have distributed malware in emails via malicious Word and Excel attachments that launch macros to download and install malware
Malware is now being spread by hackers by using Microsoft OneNote attachments in phishing emails, infecting victims using remote access malware that can be used to install additional malware, steal passwords, or even cryptocurrency wallets.
Attackers, for years, have distributed malware in emails via malicious Word and Excel attachments that launch macros to download and install malware.
However, rendering this method untrustworthy for malware distribution, Microsoft, in July last year disabled macros by default in Office documents.
Threat actors then quickly began using new file formats, such as ISO images and password-protected ZIP files.
These file formats quickly gained popularity, aided by a Windows bug that allowed ISOs to bypass security warnings and the popular 7-Zip (a free and open-source file archiver) utility’s failure to propagate mark-of-the-web flags to files extracted from ZIP archives.
However, these bugs were fixed by both 7-Zip and Windows recently, preventing users from opening files in downloaded ISO and ZIP files without scary security warnings.
Microsoft OneNote that comes with Microsoft Office 2019 and Microsoft 365 is a free desktop digital notebook application.
Meanwhile, to protect all of its cloud customers, the tech giant banned cryptocurrency mining from its online services.
“Cryptocurrency mining can disrupt or even impair Online Services and its users, and is often associated with unauthorised access to and use of customer accounts,” Microsoft said.
“We made this change to further protect our customers and mitigate the risk of disrupting or impairing services in the Microsoft Cloud,” it added.
Do Follow: CIO News LinkedIn Account | CIO News Facebook | CIO News Youtube | CIO News Twitter
About us:
CIO News, a proprietary of Mercadeo, produces award-winning content and resources for IT leaders across any industry through print articles and recorded video interviews on topics in the technology sector such as Digital Transformation, Artificial Intelligence (AI), Machine Learning (ML), Cloud, Robotics, Cyber-security, Data, Analytics, SOC, SASE, among other technology topics
