Dridex Trojan Campaign Ravages with New Zero-Day

Microsoft Word Affected by Critical Office Zero Day Vulnerability Reports McAfee

As we mentioned, McAfee first highlighted the exploit, and in its research report, it said that it discovered the exploit in action in late January.

While most malware requires human intervention to activate it in a system, the Microsoft zero-day is able to run by simply opening the corrupted Word document, giving hackers control of an infected computer and their personal banking details and access passwords.

Microsoft Office users should be careful of this zero-day exploit targeting Word documents by attaching a malicious document on their emails. It exploits a flaw in Windows' Object Linking and Embedding (OLE), an important feature of Office, which lets users embed or link to other Office documents, like spreadsheets or charts.

Sergio Garcia wins first major in dramatic playoff at the Masters
Both players hit it close at the par-3 16th, but Rose rolled in his birdie putt and Garcia missed. Garcia's win at the Masters was his 18th appearance at the tournament.

FireEye said it has been working with Microsoft on the vulnerability for several weeks and had agreed not to publicly disclose it until a patch was released, but chose to reveal the details after McAfee published its post.

Microsoft also released additional updates for vulnerabilities in its products overnight, as part of its monthly security updates. Microsoft is reportedly working on a fix that should be available on Tuesday. That's because the company is aware of limited, targeted attacks that try to take advantage of an unpatched vulnerability in this filter.

The exploit connects to a remote server to obtain an execute an HTA file, which contains VBScript to be executed by the client. You might even have to worry about your finances: Researchers have found that during tax season hackers send spam emails pretending to be from a "tax officer" with a fake tax refund form attached as a Word document, with malware embedded. It means the vulnerability is not known by the public except for attackers who are exploiting it. The cybersecurity firm said it's informed Microsoft and is coordinating with the company to address the vulnerability.

Trump and May hope to persuade Russian Federation to drop Assad support
In that interview airing Sunday on CBS' "Face the Nation", Tillerson said Russians were not targeted by the strikes. He knocked the Obama administration for not responding to Assad's chlorine gas attacks after the deal was in place.

In a blog post, Proofpoint researchers said the vulnerability represents a "significant level of agility and innovation" for the developers of the Dridex banking Trojan, which traditionally spreads to Windows users via macro-based documents in email attachments.

Worryingly, the vulnerability now remains active, but Microsoft has pledged the bug will be nixed when the monthly security update rolls out on April 11.

"We suggest everyone ensure that Office Protected View is enabled", said Li. The flaw allows attackers to bypass the exploit mitigations in even the most recent version of Windows.

Not so silent night: Dallas emergency siren system hacked
A city spokesperson says the sirens are going off due to a system malfunction and emergency crews are working to fix the problem. Vaz said city officials have asked the Federal Communications Commission for help in determining who was behind the hack.

Related news:

Hot News

isis-killer-beheading-video-story-top Sharks to face Oilers in first round of playoffs
Apr 13, 2017 - 02:00
Couture has been skating but is still in pain after being drilled in the face by a redirected Brent Burns slap shot March 25. Are they in a prime position to unseat the defending Western Conference champions? Eberle isn't anxious about it.

isis-killer-beheading-video-story-top Syrian president's office describes US strikes as 'reckless, irresponsible behavior'
Apr 12, 2017 - 03:44
The American attack "sends a clear message to the regime and its backers" that they can no longer avoid repercussions, he added. Disabled: The damage sustained in the 30-minute attack was meant to disable the air base, near the city of Homs.

Is North Korea putting nuclear-tipped bargaining chip on table
Apr 12, 2017 - 03:42
But Beijing is wary of putting too much pressure on North Korea for fear of the unpredictable consequences if the state collapses. The missile launch may be a precursor, with more to come as the summit starts later this week, Cossa said.

Three dead, one injured after California elementary school shooting
Apr 11, 2017 - 09:21
Anderson and Smith were found dead in a special needs classroom that serves the first through fourth grades, Burguan said. It began when Anderson signed in as a visitor to the school, saying he was dropping off something for his wife.

isis-killer-beheading-video-story-top Leonard Fournette: Fournette 'even in play' for Browns at No. 1
Apr 11, 2017 - 09:21
As is pretty much any of the guys who will be taken in the top 10, in the event the Browns trade down but stay in the top 10. "I think some of them wanted me to just see if I could get down to that size", Fournette told reporters at the pro day.

Hillary Reveals Reasons Why She Lost The Election
Apr 10, 2017 - 02:25
Violence between the Assad regime and US-backed rebels has raged since 2011, killing more than 220,000 people and creating more than 4.81 million refugees.

isis-killer-beheading-video-story-top Leicester skipper Morgan out of Everton trip with back injury
Apr 10, 2017 - 02:25
Leicester haven't won back-to-back Premier League games away from home in almost a year - a run of three wins in April 2016. Musa has only started 13 games for the Foxes all season, with seven of those coming in the Premier League.

isis-killer-beheading-video-story-top Negotiator denies United Kingdom is blackmailing European Union on security
Apr 10, 2017 - 02:24
After narrowly voting to leave the EU in June, British politicians haven't had many nice things to say about their European partners.

Impeachment of Alabama Governor Bentley Allowed to Proceed
Apr 10, 2017 - 02:23
We will review today's document dump - which appears to be an amalgam of hearsay, rumor and innuendo. Robert Bentley's request for a temporary restraining order against the House Judiciary Committee.

Real Madrid doors open to 'great' Griezmann, insists Ramos
Apr 10, 2017 - 02:22
That was when Correa connected with his forward to flip the match on its head and cast doubt on Real's march toward the trophy.

Memories of Tupac breath life into 2017 Rock Hall Ceremony
Apr 09, 2017 - 03:07
On Friday he will become only the sixth rap act to be inducted into the Rock & Roll Hall of Fame. "It just ain't the same thing". Rapper T.I. performs at the 32nd Annual Rock & Roll Hall of Fame Induction Ceremony in NY .

isis-killer-beheading-video-story-top Tar Heels take title over Gonzaga in ugly game
Apr 09, 2017 - 03:04
Both of Berry's parents are still connected to Lake Highland, and Vallery said Highlanders nation is ecstatic with his success. Karnowski went for 1-8 overall and failed to make shots that he would normally make.

isis-killer-beheading-video-story-top USA special operations soldier killed in Afghanistan
Apr 09, 2017 - 03:01
A member of the USA special forces has been killed while taking part in an operation against Islamic State in Afghanistan . Salvin said in the tweet that more information would be released "as appropriate".

isis-killer-beheading-video-story-top Bayern Munich run over Borussia Dortmund 4-1
Apr 09, 2017 - 03:00
Captain Lars Stindl scored the victor nine minutes from time for Gladbach after Cologne had twice come from behind to equalise. Lewandowski stepped up to take the penalty and slotted it home for the 4-1 victory.

Weather service says 2 low-level tornadoes hit western Ohio
Apr 08, 2017 - 07:41
As a result, officials with the Lancaster County Sheriff's Office said the hospital was only accepting emergency patients. The road to the historic Tides Inn Hotel in Irvington was blocked by fallen trees after an EF1 tornado touched down.