Microsoft Patches Problem In App That Spread Malware — Microsoft Office Hack


Security researchers over at security firm McAfee are warning Office users regarding a zero-day security flaw within the productivity suite, which has been used by criminals to attack unsuspecting people since January.

Microsoft Tuesday patched a previously undisclosed Word zero-day vulnerability attackers used to install a variety of malware on victims' computers. This connects to a remote server in the background and downloads a file that contains a HTML application content file that looks like a Microsoft document, but executes it as an.hta file.

Security researchers FireEye has revealed a new vulnerability in Word based on Windows Object Linking and Embedding (OLE), and which is now doing the rounds. The security researchers who discovered this vulnerability say that it is different from other Word exploits seen in the past because it does not require the user to enable Macros. The latter said it had shared the details of the Office security exploit with Microsoft and had been withholding details for the company to be able to deliver a patch before going public with the information. Microsoft has confirmed it will send a patch tomorrow on Patch Tuesday.

McAfee told users not to open any Office files obtained from untrusted sources, especially from emails.

Microsoft has been quick off the mark to release a patch for the vulnerability, which also affected Office 2016.

Musa will still play for Leicester, says Shakespeare
Thirty seconds in and Everton were ahead through Davies, who owed a debt of gratitude to referee Robert Madley. "It's tougher. Jamie Vardy in three previous Premier League games against the Toffees has scored and assisted on four goals.

The ultimate solution here is to install Microsoft's patch as soon as possible.

"[The vulnerability] was addressed in the April security update released on April 11, 2017". Researchers at Proofpoint said the malicious emails hit millions of users this week.

"The term "zero day" refers to the unknown nature of the hole to those outside of the hackers, specifically, the developers". To the user, the HTA file appears as a Microsoft Rich text document with a.doc extension.

In 2015, it was cited as the means by which cyber-attackers stole more than £20m from British bank accounts.

Ryan Hanson, a researcher at security firm Optiv and the person Microsoft credited with reporting the critical bug, said exploits can execute malicious code even when a mitigation known as Protected View isn't disabled. Both McAfee and FireEye stated that the feat can bypass most memory-based mitigations that are included in Windows. If you choose to open an attached Word document, extreme caution should be exercised before disabling Protected View.

Related News:

  • Qualcomm countersues Apple over modem chip performance

    Qualcomm also claims that its patents were essential to the iPhone's success, also stating that its license rates were fair. Most of Quantum's profit comes from licensing technology that covers the barebones of smart phone systems.

    2 adults dead, 2 kids shot at California school

    The students, who were in hospitals in critical condition Monday afternoon, did not appear to be specifically targeted, they said. A school police officer is assigned to every LAUSD high school and numerous middle schools, said LAUSD spokeswoman Monica Carazo.
    Liverpool's Mane to miss rest of season

    Liverpool's Mane to miss rest of season

    Liverpool manager Juergen Klopp says the need for surgery means "it's clear, season over". We're not 100% sure when it will happen.
  • Save ACA, Medicaid; get more enrolled

    Save ACA, Medicaid; get more enrolled

    Henderson says people also may not realize that Medicaid expansion is a provision of the ACA . They aren't eligible for federal tax credits that reduce the size of insurance premiums.

    During border visit, Sessions outlines immigration plan

    She said Sessions' message made it sound like everyone entering the US from Mexico is doing so illegally. Since he was confirmed, Sessions has widened the Justice Department's role in immigration prosecutions.

    Misogyny played a role in USA election loss: Clinton

    Clinton on Friday urged the administration to "recognize that we can not in one breath speak of protecting Syrian babies and in the next close America's doors to them".
  • BlackBerry Ltd (BBRY) Expected to Announce Quarterly Sales of $264 Million

    Finally, Public Sector Pension Investment Board raised its position in shares of BlackBerry by 4.2% in the fourth quarter. Connor Clark & Lunn Investment Management Ltd. raised its position in BlackBerry by 13.5% in the third quarter.
    Ski-park operator Intrawest to go private in $944 million deal

    Ski-park operator Intrawest to go private in $944 million deal

    A ski resort company that stretches from Canada's Quebec to the US state of Colorado has been acquired by the Aspen Skiing Co. Under the terms, Intrawest will be bought by a newly formed entity controlled by affiliates of Aspen Skiing and KSL Capital.
    Iran condemns USA  strike on Syrian airbase

    Iran condemns USA strike on Syrian airbase

    President Donald Trump's decision to launch 59 Tomahawk cruise missiles at a Syrian government airbase Thursday night. The U.S. intelligence community assesses that aircraft from Shayrat conducted the chemical weapons attack on April 4.
  • Taiwan bans sale, consumption of dog and cat meat

    Taiwan bans sale, consumption of dog and cat meat

    A Taiwan ban on the consumption of dog and cat meat passed Tuesday after an amendment to an animal protection law went through. Taiwan now has national legislature banning the consumption of dog and cat meat, slapping hefty fines on violators.
    Democrats push to link Syria strike, refugee ban

    Democrats push to link Syria strike, refugee ban

    The Syrian Civil War started in 2011. "Cruise missiles alone are not a solution", said Rep. She called for the administration to immediately revoke its position on refugees.
    McConnell reaches out to Romney about possible Senate bid

    McConnell reaches out to Romney about possible Senate bid

    Despite Senator Hatch still deciding if he'll run for an eighth term rumors about Romney are flying. Orrin Hatch - the Republican elected who now holds the seat for which Romney would be running.

Most liked

Triple talaq impacts dignity of Muslim women: Centre to SC
The submissions drawn by advocate Madhvi Divan have been settled by the Attornewy Genewral Mukul Rohatgi. Sadiq, a Shia scholar, acknowledged that triple talaq was unfair to women.

Burger King's newest TV ad has a disastrous flaw
Burger King did not immediately respond to request for comment. "Are people going to unplug the device when they watch TV?" The internet barely had time to be annoyed for that new 15 second Burger King ad before Google shut the whole thing down.

Janet Jackson 'splits from husband' months after welcoming first child
Jackson postponed her Unbreakable world concert tour last spring, explaining, " My husband and I are planning our family ". She was married to Rene Elizondo 1991 but they kept their relationship under wraps until their divorce in 2000.

Employment rate remains high amid record numbers of job vacancies
Prices of housing water, electricity, gas and other fuels rose by 2.5 per cent, while cost of transport inched up 8.9 per cent. China's consumer inflation rate has been far milder, edging up to 0.9 percent in March, from 0.8 percent in February.

Trump, Xi showdown fails to materialize at Mar-a-Lago
China's leaders in fact have always been concerned about the yawning US trade deficit with their country, 7 billion in 2016. Tillerson said Trump had accepted Xi's invitation to visit China and that they also agreed to upgrade a U.S.

Garcia beats Rose in Masters playoff for first major win
Not since Spain's Jose Maria Olazabal in 1994 had a Masters champion eagled on the back nine in the final round. Asked about his previous comments about the course, Garcia told a media conference: "I don't know.

Indian, Chinese navies rescue ship hijacked by Somali pirates
Four of its navy ships responded to the signal and reached the bulk carrier early on Sunday, the Indian defence ministry said. Indian Navy has posted a picture on its twitter handle which shows an Indian helicopter flying over Chinese naval vessels.

Syrian town hit by chemical attack targeted in airstrikes
And Haley, too, said Washington's priority was "no longer to sit and focus on getting Assad out". In fact, we were prepared to do more two days ago", McMaster said.

Toledo Zoo welcomes baby Masai giraffe Kipenzi
The zoo hasn't shared how far along she is but we do know that the average length of pregnancy for a giraffe is 13-15 months. In an update, the zoo reported , "We have been told by other parks that mothers will sometimes feast just before the birth".

North Korea says Syria airstrikes prove its nukes justified
Strategic Command, maintained on Wednesday that "any solution to the North Korea problem has to involve China". Navy ships are a common presence in the Korean Peninsula region and serve in part as a show of force.

Canada, US, Mexico to launch 2026 World Cup soccer pitch
Paul Mariner has some strong words in opposition of FIFA's plan to allocate for a 48-team World Cup. The rules should be announced around its annual congress, on May 11 in Manama, Bahrain.

One person dead after shooting near mall in South Florida
Police patrol outside of the Shops at Merrick Park after a shooting, Saturday, April 8, 2017 , in Coral Gables, Fla . The Coral Gables Police Department and Miami-Dade Police Department surrounded the mall at 358 San Lorenzo Avenue .

Amid calls for recusal, House Intel chairman Devin Nunes digs in
Kushner is considered one of Trump's most-trusted advisers. "The integrity of the committee looking into this has been tainted". Nunes does not have those documents, he said, nor has he shared them with any of the Republicans or Democrats on the committee.

Allegations against me are sickening: Ex-South African FM
Nkosazana Dlamini-Zuma, the president's ex-wife and former African Union chief, is Zuma's preferred candidate to succeed him. Gordhan has managed to prevent a downgrade, but the cabinet decision will leave South Africa's credit rating vulnerable.

Man City boss Guardiola needs Hull of a boost
Asked whether that meant he would stay at Chelsea next season, Conte replied: 'Yes, for the next season'. "They got six points". The Tottenham result is important but the most important results is ours, we have to continue to think like that.