plc.myforum.ro

kosta · Member Joined: 09 Aug 2015 Posts: 161 Location: Salonic

Microsoft Office vulnerabilities to distribute malware
Hackers are exploiting vulnerabilities in Microsoft Office software to spread a sophisticated form of malware that's capable of stealing credentials, dropping additional malware, cryptocurrency mining, and conducting distributed denial-of-service (DDoS) attacks.
Microsoft Office vulnerabilities to distribute malware Microsoft Office vulnerabilities to distribute malware

Microsoft Office vulnerabilities to distribute malware Microsoft Office vulnerabilities to distribute malware

One of the vulnerabilities exploited by the attackers is CVE-2017-11882. Disclosed in December, it's a security vulnerability in Microsoft Office which enables arbitrary code to run when a maliciously-modified file is opened. In the case of this campaign, the vulnerability allows an additional download to be triggered using a stored URL within the malicious attachment. The download contains the PowerShell script which drops the malware.
http://www.zdnet.com/article/hackers-are-using-recent-microsoft-office-vulnerabilities-to-distribute-malware/

https://portal.msrc.microsoft.com/en-US/eula
The malware campaign also attempts to leverage CVE-2017-8759, a vulnerability which exists when Microsoft .NET Framework processes untrusted input and could allow an attacker to take control of an affected system. In this instance, the DOC file attached to the phishing emails contains an embedded OLE object which triggers the download of a stored URL to start the PowerShell process. The vulnerability was disclosed and patched in September.

http://www.zdnet.com/article/microsoft-patches-office-zero-day-used-to-spread-finspy-surveillance-malware/