Microsoft Patches Problem In App That Spread Malware — Microsoft Office Hack

Microsoft Zero Day attacks see hackers target Word users with new bug that affects every version

Security researchers over at security firm McAfee are warning Office users regarding a zero-day security flaw within the productivity suite, which has been used by criminals to attack unsuspecting people since January.

Microsoft Tuesday patched a previously undisclosed Word zero-day vulnerability attackers used to install a variety of malware on victims' computers. This connects to a remote server in the background and downloads a file that contains a HTML application content file that looks like a Microsoft document, but executes it as an.hta file.

Security researchers FireEye has revealed a new vulnerability in Word based on Windows Object Linking and Embedding (OLE), and which is now doing the rounds. The security researchers who discovered this vulnerability say that it is different from other Word exploits seen in the past because it does not require the user to enable Macros. The latter said it had shared the details of the Office security exploit with Microsoft and had been withholding details for the company to be able to deliver a patch before going public with the information. Microsoft has confirmed it will send a patch tomorrow on Patch Tuesday.

McAfee told users not to open any Office files obtained from untrusted sources, especially from emails.

Microsoft has been quick off the mark to release a patch for the vulnerability, which also affected Office 2016.

2 adults dead, 2 kids shot at California school
The students, who were in hospitals in critical condition Monday afternoon, did not appear to be specifically targeted, they said. A school police officer is assigned to every LAUSD high school and numerous middle schools, said LAUSD spokeswoman Monica Carazo.

The ultimate solution here is to install Microsoft's patch as soon as possible.

"[The vulnerability] was addressed in the April security update released on April 11, 2017". Researchers at Proofpoint said the malicious emails hit millions of users this week.

"The term "zero day" refers to the unknown nature of the hole to those outside of the hackers, specifically, the developers". To the user, the HTA file appears as a Microsoft Rich text document with a.doc extension.

In 2015, it was cited as the means by which cyber-attackers stole more than £20m from British bank accounts.

Ryan Hanson, a researcher at security firm Optiv and the person Microsoft credited with reporting the critical bug, said exploits can execute malicious code even when a mitigation known as Protected View isn't disabled. Both McAfee and FireEye stated that the feat can bypass most memory-based mitigations that are included in Windows. If you choose to open an attached Word document, extreme caution should be exercised before disabling Protected View.

Related News:

  • New Nintendo Direct scheduled for April 12

    Information on Splatoon 2 has been slowly trickling out, and a public "Testfire" demo period took place late last month. Imagine team fights of two versus two in a big map, running around and throwing punches in the air.
    One person dead after shooting near mall in South Florida

    One person dead after shooting near mall in South Florida

    Police patrol outside of the Shops at Merrick Park after a shooting, Saturday, April 8, 2017 , in Coral Gables, Fla . The Coral Gables Police Department and Miami-Dade Police Department surrounded the mall at 358 San Lorenzo Avenue .
    Allegations against me are sickening: Ex-South African FM

    Allegations against me are sickening: Ex-South African FM

    Nkosazana Dlamini-Zuma, the president's ex-wife and former African Union chief, is Zuma's preferred candidate to succeed him. Gordhan has managed to prevent a downgrade, but the cabinet decision will leave South Africa's credit rating vulnerable.
  • Syrian town hit by chemical attack targeted in airstrikes

    Syrian town hit by chemical attack targeted in airstrikes

    And Haley, too, said Washington's priority was "no longer to sit and focus on getting Assad out". In fact, we were prepared to do more two days ago", McMaster said.
    Ski-park operator Intrawest to go private in $944 million deal

    Ski-park operator Intrawest to go private in $944 million deal

    A ski resort company that stretches from Canada's Quebec to the US state of Colorado has been acquired by the Aspen Skiing Co. Under the terms, Intrawest will be bought by a newly formed entity controlled by affiliates of Aspen Skiing and KSL Capital.

    North Korea says Syria airstrikes prove its nukes justified

    Strategic Command, maintained on Wednesday that "any solution to the North Korea problem has to involve China". Navy ships are a common presence in the Korean Peninsula region and serve in part as a show of force.
  • BlackBerry Ltd (BBRY) Expected to Announce Quarterly Sales of $264 Million

    BlackBerry Ltd (BBRY) Expected to Announce Quarterly Sales of $264 Million

    Finally, Public Sector Pension Investment Board raised its position in shares of BlackBerry by 4.2% in the fourth quarter. Connor Clark & Lunn Investment Management Ltd. raised its position in BlackBerry by 13.5% in the third quarter.
    Employment rate remains high amid record numbers of job vacancies

    Employment rate remains high amid record numbers of job vacancies

    Prices of housing water, electricity, gas and other fuels rose by 2.5 per cent, while cost of transport inched up 8.9 per cent. China's consumer inflation rate has been far milder, edging up to 0.9 percent in March, from 0.8 percent in February.

    Trump, Xi showdown fails to materialize at Mar-a-Lago

    China's leaders in fact have always been concerned about the yawning US trade deficit with their country, 7 billion in 2016. Tillerson said Trump had accepted Xi's invitation to visit China and that they also agreed to upgrade a U.S.
  • Taiwan bans sale, consumption of dog and cat meat

    Taiwan bans sale, consumption of dog and cat meat

    A Taiwan ban on the consumption of dog and cat meat passed Tuesday after an amendment to an animal protection law went through. Taiwan now has national legislature banning the consumption of dog and cat meat, slapping hefty fines on violators.

    Qualcomm countersues Apple over modem chip performance

    Qualcomm also claims that its patents were essential to the iPhone's success, also stating that its license rates were fair. Most of Quantum's profit comes from licensing technology that covers the barebones of smart phone systems.
    Burger King's Whopper gets prank Wikipedia edits in ad gag

    Burger King's Whopper gets prank Wikipedia edits in ad gag

    Still, according to Bloomberg, Burger King President Jose Cil called it "a cool way, and a bold way, to surprise our guests ". The there was this Pixel commercial, where a Pixel user says "Ok Google , show me Korean restaurants in Boulder".

Most liked

Triple talaq impacts dignity of Muslim women: Centre to SC
The submissions drawn by advocate Madhvi Divan have been settled by the Attornewy Genewral Mukul Rohatgi. Sadiq, a Shia scholar, acknowledged that triple talaq was unfair to women.

Save ACA, Medicaid; get more enrolled
Henderson says people also may not realize that Medicaid expansion is a provision of the ACA . They aren't eligible for federal tax credits that reduce the size of insurance premiums.

Janet Jackson 'splits from husband' months after welcoming first child
Jackson postponed her Unbreakable world concert tour last spring, explaining, " My husband and I are planning our family ". She was married to Rene Elizondo 1991 but they kept their relationship under wraps until their divorce in 2000.

United Airlines CEO faults ejected passenger for being 'disruptive and belligerent'
On Twitter , a representative of the United said the flight in question was "overbooked" and that "one customer refused to leave". Sunday, was taken from an aisle seat on a commercial airplane that appears to be preparing to take flight.

Celebrations as Grand National victor returns home
Bookmakers across the United Kingdom are counting the cost of Saturday's Grand National after a 14-1 shot claimed victory. We didn't realise we had just bought such an incredible horse, but he has given us such a wonderful journey .

Garcia beats Rose in Masters playoff for first major win
Not since Spain's Jose Maria Olazabal in 1994 had a Masters champion eagled on the back nine in the final round. Asked about his previous comments about the course, Garcia told a media conference: "I don't know.

Russia knew in advance of Syrian chemical attack
Just over a week ago, top administration officials were signaling that removing Assad is no longer a USA priority. Russian President Vladimir Putin stated that the incident seriously hurt U.S. -Russia relations.

Yankees Michael Pineda turns in sparkler in home-opener win
Over the course of 25 appearances last season, all of which were starts, he produced a 2.13 ERA alongside a 14-5 record. Pineda recovered by retiring by Derek Norris on a groundout and then exited to a loud standing ovation from the crowd.

Indian, Chinese navies rescue ship hijacked by Somali pirates
Four of its navy ships responded to the signal and reached the bulk carrier early on Sunday, the Indian defence ministry said. Indian Navy has posted a picture on its twitter handle which shows an Indian helicopter flying over Chinese naval vessels.

Toledo Zoo welcomes baby Masai giraffe Kipenzi
The zoo hasn't shared how far along she is but we do know that the average length of pregnancy for a giraffe is 13-15 months. In an update, the zoo reported , "We have been told by other parks that mothers will sometimes feast just before the birth".

Democrats push to link Syria strike, refugee ban
The Syrian Civil War started in 2011. "Cruise missiles alone are not a solution", said Rep. She called for the administration to immediately revoke its position on refugees.

Fed minutes reveal debate over inflation and Trump
The Federal Reserve is trying to send a message to bond traders: prepare for a reduction in its $US4.5 trillion balance sheet. Markets have risen in recent months in part on speculation fiscal stimulus would boost USA growth and inflation.

Canada, US, Mexico to launch 2026 World Cup soccer pitch
Paul Mariner has some strong words in opposition of FIFA's plan to allocate for a 48-team World Cup. The rules should be announced around its annual congress, on May 11 in Manama, Bahrain.

Tidal Owner Jay-Z Pulls Every Album from Spotify, Apple Music
Jay Z fans may find their options a bit slim when it comes to streaming his music this weekend. We've reached out to Roc Nation and Apple Music for comment.

Iran condemns USA strike on Syrian airbase
President Donald Trump's decision to launch 59 Tomahawk cruise missiles at a Syrian government airbase Thursday night. The U.S. intelligence community assesses that aircraft from Shayrat conducted the chemical weapons attack on April 4.