Successful exploitation of the vulnerability allows attackers to run arbitrary code with the privileges of a calling application, explained in the troubleshooting guide from Microsoft. The MalwareHunterTeam security researcher also found DOCX documents with file names in Chinese used to install Trojans to steal data via coolrat.xyz. When the victim opens the document or its preview, malicious code is executed on the victim's system through the MSDT protocol. Posing as the women's rights department of the Central Tibetan Administration, attackers distribute Zip archives with malicious Word documents. The vulnerability is CVE-2022-30190 present in the Microsoft Windows Support Diagnostic Tool (MSDT) utility and affects all supported Microsoft client and server versions of Windows. The alleged PRC Government cybercriminal group is actively exploiting a zero-day vulnerability in Microsoft Office, known as Follina, to remotely execute code on attacked Windows systems. The APT group TA413 exploits the vulnerability to attack its favorite targets - Tibetans. the Chinese hackers This became known on June 1, 2022. The Office package has been downloaded more than 100 million times by the owners of iOS and Android gadgets.Ģ022 Exploitation of the vulnerability by Chinese hackersĪ recent 0-day vulnerability Microsoft in Office is already being exploited. Microsoft Office includes software for working with various types of documents: texts, spreadsheets, databases.Īs of the end of September 2015, the number of Office users reached 1.2 billion. It is the most popular set of office programs in Russia - only free Open Office can be cited as an analogue. Microsoft Office (Microsoft Office) is a package of business applications developed by Microsoft and designed for operating systems Windows, Apple Mac OS and mobile platforms. Waiting for Office for iOS and Android?.Вышел Microsoft Office for Android Tablet.Microsoft Office Professional Plus 2013 received the certificate of FSTEC of Russia.Microsoft bought LiveLoop, an Office software developer.Microsoft released a free version of Office for Android.Appearance of the built-in antivirus mechanism.Stop developing Office for touch displays.Updated design, new icons for the first time in 5 years.Support for Microsoft Word formats in Google Docs.The danger of the "disable all macros without notification" option in Microsoft Office for Mac.Transcribe in Word Announcement - Audio Recording and Decryption in Word.In the top 50 largest Internet sites in the world.Microsoft Office announcement with dramatically updated interface.Block macros in five Office applications.Ability to remotely execute arbitrary code using a 0-day vulnerability.Exploitation of the vulnerability by Chinese hackers.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |