MS Office – Computer Security Articles

Your Office Document is at Risk – XLL, A New Attack Vector

February 21, 2023 admin #malwareattack, Cyberattack, cybersecurity, email, Excel, information stealer, malware, Microsoft Office, MS Office, Quick Heal, spyware, Uncategorized, Vulnerability, xll

Credit to Author: Anjali Raut| Date: Tue, 21 Feb 2023 11:55:22 +0000

Microsoft office documents are used worldwide by both corporates and home-users alike. It’s different office versions, whether…

The post Your Office Document is at Risk – XLL, A New Attack Vector appeared first on Quick Heal Blog | Latest computer security news, tips, and advice.

QuickHeal Security

Malspam campaigns exploiting recent MS Office vulnerability ‘CVE-2017-11882’ – An Analysis by Quick Heal Security Labs

February 5, 2018 admin Cyber safety, exploit, malware, MS Office, RTF, Security, Vulnerability

Credit to Author: Aniruddha Dolas| Date: Mon, 05 Feb 2018 10:12:34 +0000

No wonder malspam campaigns are a major medium to spread malware. Previously, we have written about such campaigns making use of MS Office malware such as malicious macro, CVE-2017-0199, CVE-2017-8759 and DDE-based attack. Recently, we have started observing various malspam campaigns exploiting the latest MS Office vulnerability CVE-2018-11882. Let’s take a look…

QuickHeal Security

Malspam campaigns exploiting recent MS Office vulnerability ‘CVE-2017-11882’

February 5, 2018 admin Cyber safety, exploit, malware, MS Office, RTF, Security, Vulnerability

Credit to Author: Aniruddha Dolas| Date: Mon, 05 Feb 2018 10:12:34 +0000

No wonder malspam campaigns are a major medium to spread malware. Previously, we have written about such campaigns making use of MS Office malware such as malicious macro CVE-2017-0199, CVE-2017-8759 and DDE-based attack. Recently, we have started observing various malspam campaigns exploiting the latest MS Office vulnerability CVE-2018-11882. Let’s take a…

QuickHeal Security

An emerging trend of DDE based Office malware – an analysis by Quick Heal Security Labs

December 6, 2017 admin DDE, exploit, malware, MS Office, obfuscation, RTF, Vulnerability

Credit to Author: Aniruddha Dolas| Date: Wed, 06 Dec 2017 09:27:30 +0000

For the past few years, we have been seeing macro-based attacks through Object Linking Embedding (OLE)/Microsoft Office files. But, presently, attackers are using a different technique to spread malware through Office files – using a new attack vector called ‘Dynamic Data Exchange (DDE)’. DDE is an authorized Microsoft Office feature that provides several methods for transferring data between applications. Once the communication protocol is established, it doesn’t require user interactions…