New zero-day Word attack emerges

By

Attackers release exploit one day after Microsoft's monthly patch release.

New zero-day Word attack emerges
Microsoft has issued a security alert concerning a new unpatched vulnerability in Word that is being actively exploited. 

Attackers could exploit the vulnerability by persuading victims to open a specially crafted Word document. On infection, the attacker could take control of the victim's system.

The flaw affects Word 2000 and Word XP. Users are urged not to open any documents originating from unknown sources.

The attack comes 24 hours after Microsoft issued its monthly set of security patches, which contained three updates for the Office productivity suites.  

Word and Excel vulnerabilities are popular with attackers targeting enterprise systems.

Numerous attacks have popped up in recent months in which criminals send out spam messages with a specially crafted Word or Excel document to a few key staff members inside one or a few organisations.

The attacks prey on business users' familiarity with Word and Excel applications, and allow the attackers to gain access to trade secrets or confidential customer information.

Launching small-scale attacks also limits the chances that a piece of malware is detected by security software, allowing the criminals to launch several raids before the security hole is plugged.

Got a news tip for our journalists? Share it with us anonymously here.
Copyright ©v3.co.uk
Tags:

Most Read Articles

India's alarm over Chinese spying rocks CCTV makers

India's alarm over Chinese spying rocks CCTV makers

Hackers abuse modified Salesforce app to steal data, extort companies

Hackers abuse modified Salesforce app to steal data, extort companies

Cyber companies hope to untangle weird hacker codenames

Cyber companies hope to untangle weird hacker codenames

Victoria's Secret pulls down website amid security incident

Victoria's Secret pulls down website amid security incident

Log In

  |  Forgot your password?