Hackers Are Now Using Microsoft OneNote Attachments To Distribute Malware: Report

Last Updated: January 23, 2023, 12:27 IST

Microsoft OneNote comes included with Microsoft Office.

Microsoft OneNote comes included with Microsoft Office.

As per a recent report, hackers are now using Microsoft OneNote to spread malware and steal passwords. Here are all the details.

Hackers are now spreading malware using Microsoft OneNote attachments in phishing emails, infecting victims using remote access malware that can be used to install additional malware, steal passwords, or even cryptocurrency wallets.

For years, attackers have distributed malware in emails via malicious Word and Excel attachments that launch macros to download and install malware, reports Bleeping Computer.

However, in July last year, Microsoft disabled macros by default in Office documents, rendering this method untrustworthy for malware distribution.

Threat actors then quickly began using new file formats, such as ISO images and password-protected ZIP files, said the report.

These file formats quickly gained popularity, aided by a Windows bug that allowed ISOs to bypass security warnings and the popular 7-Zip (a free and open-source file archiver) utility’s failure to propagate mark-of-the-web flags to files extracted from ZIP archives.

However, these bugs were fixed by both 7-Zip and Windows recently, preventing users from opening files in downloaded ISO and ZIP files without scary security warnings, the report added.

Microsoft OneNote is a free desktop digital notebook application that comes with Microsoft Office 2019 and Microsoft 365.

Meanwhile, the tech giant banned cryptocurrency mining from its online services to protect all of its cloud customers, media reports said.

“Cryptocurrency mining can disrupt or even impair Online Services and its users, and is often associated with unauthorised access to and use of customer accounts,” Microsoft told The Register.

“We made this change to further protect our customers and mitigate the risk of disrupting or impairing services in the Microsoft Cloud,” it added.

Read all the Latest Tech News here

(This story has not been edited by News18 staff and is published from a syndicated news agency feed)

For all the latest Technology News Click Here 

Read original article here

Denial of responsibility! TechAI is an automatic aggregator around the global media. All the content are available free on Internet. We have just arranged it in one platform for educational purpose only. In each content, the hyperlink to the primary source is specified. All trademarks belong to their rightful owners, all materials to their authors. If you are the owner of the content and do not want us to publish your materials on our website, please contact us by email – [email protected]. The content will be deleted within 24 hours.