RTF – Computer Security Articles

Weaponized RTF documents adopt CVE-2018-0798, another Equation Editor vulnerability<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/ltjXsAajVFc” height=”1″ width=”1″ alt=””/>

Security Sophos

Malicious doc “builders” abandon old exploits wholesale

September 11, 2018 admin CVE-2012-0158, CVE-2017-0199, CVE-2017-11882, CVE-2018-0802, CVE-2018-4878, document, downloader, dropper, editor, Equation, Excel, maldoc, maldocs, malware, microsoft, MSCOMCTL.OCX, office, PowerPoint, RTF, SophosLabs Uncut, weaponized, Word

Credit to Author: Gabor Szappanos| Date: Tue, 11 Sep 2018 16:15:26 +0000

A key piece of the malware ecosystem adopts new vulnerabilities, and scraps old exploits, in record time<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/gKMCGkmvrcQ” height=”1″ width=”1″ alt=””/>

QuickHeal Security

Malspam campaigns exploiting recent MS Office vulnerability ‘CVE-2017-11882’ – An Analysis by Quick Heal Security Labs

February 5, 2018 admin Cyber safety, exploit, malware, MS Office, RTF, Security, Vulnerability

Credit to Author: Aniruddha Dolas| Date: Mon, 05 Feb 2018 10:12:34 +0000

No wonder malspam campaigns are a major medium to spread malware. Previously, we have written about such campaigns making use of MS Office malware such as malicious macro, CVE-2017-0199, CVE-2017-8759 and DDE-based attack. Recently, we have started observing various malspam campaigns exploiting the latest MS Office vulnerability CVE-2018-11882. Let’s take a look…

QuickHeal Security

Malspam campaigns exploiting recent MS Office vulnerability ‘CVE-2017-11882’

February 5, 2018 admin Cyber safety, exploit, malware, MS Office, RTF, Security, Vulnerability

Credit to Author: Aniruddha Dolas| Date: Mon, 05 Feb 2018 10:12:34 +0000

No wonder malspam campaigns are a major medium to spread malware. Previously, we have written about such campaigns making use of MS Office malware such as malicious macro CVE-2017-0199, CVE-2017-8759 and DDE-based attack. Recently, we have started observing various malspam campaigns exploiting the latest MS Office vulnerability CVE-2018-11882. Let’s take a…

QuickHeal Security

An emerging trend of DDE based Office malware – an analysis by Quick Heal Security Labs

December 6, 2017 admin DDE, exploit, malware, MS Office, obfuscation, RTF, Vulnerability

Credit to Author: Aniruddha Dolas| Date: Wed, 06 Dec 2017 09:27:30 +0000

For the past few years, we have been seeing macro-based attacks through Object Linking Embedding (OLE)/Microsoft Office files. But, presently, attackers are using a different technique to spread malware through Office files – using a new attack vector called ‘Dynamic Data Exchange (DDE)’. DDE is an authorized Microsoft Office feature that provides several methods for transferring data between applications. Once the communication protocol is established, it doesn’t require user interactions…

← Previous