An unpatched bug that
malicious files into the victim’s system.A bug that existing in the JavaScript code execution within the office-embedded video component leads attackers to execute the malicious code.
This flaw affected Office 2016 and older versions and it will not produce any security warning while victims opening the document.
Researchers built a Proof-of-concept for this attack using youtube video link with word document and demonstrate the infection process.
This flaw allows let an attacker execute the powerful malware or ransomware also they will use the evasion technique to avoid the security software detection.
Malicious hackers having an embedded video link inside of the Microsoft word document and send to victims via phishing mail that trick users to open it.
Embedded video contains a link that pointed to YOUTUBE and the hidden html
.According to cymulate, This attack is carried out by embedding a video inside a Word document, editing the XML file named document.xml, replacing the video link with a crafted payload created by the attacker which opens Internet Explorer Download Manager with the embedded code execution file.
Embed an online video option within the word document and link any YouTube video and save the document.
Later unpack the word document using unpacker or change the extension as
Word document contains a file called
A researcher from cymulate
Block Word documents containing the tag: “embeddedHtml” in the Document.xml file of the word documents.
Block word documents containing an embedded video.
Patched MS Office RCE Vulnerability Again Abused Windows Installer and Delivering a Keylogger
SmokeLoader Malware Abusing MS Office Document and Compromise Windows 8 ,10 Users PC
Lazarus Hacking Group Delivering RATANKBA Malware & Remote Hacking Tool Via MS Office Documents
SpyLoan apps, a type of PUP, are rapidly increasing, exploiting social engineering to deceive users…
CyberVolk, a politically motivated hacktivist group, has leveraged readily available ransomware builders like AzzaSec, Diamond,…
A ransomware attack on Blue Yonder, a leading supply chain management software provider, has created…
Dell Technologies has released a security update for its Wyse Management Suite (WMS) to address…
The Cybersecurity and Infrastructure Security Agency (CISA) recently detailed findings from a Red Team Assessment…
IBM has issued a security bulletin warning customers about a vulnerability in its Workload Scheduler…