 |
| Malicious attack warning for Microsoft OneNote users |
Researchers from Proofpoint, a security solutions company, have warned of a new malicious attack targeting millions of users of the Microsoft OneNote note-taking application, which comes with the Office application.
According to the report, the attackers exploited the notes attachment feature to attach malicious files and share them with victims, often with fake addresses, similar to invoices, packing slips, or greeting cards.
The researchers said they were able to identify six attacks in December and more than 50 attacks in January. These attacks spread the most dangerous types of malware, including those that antivirus software can't detect. Company experiences.
Malware distributed via OneNote falls into the category of "Trojan horse" viruses that, once on a user's device, can take control and steal sensitive information, including hackable content, using the victim's device as a starting point, without the user's knowledge. . new attacks by them. According to the company, (OneNote) is a smart choice for the spread of malware, unlike email attachments that may be more suspicious to users due to the spread of malware, (OneNote) is considered by many to be a reliable source, especially since many companies officially adopt it. Encourages employees to use it to record and share feedback.
The company indicated that educating users remains the first line of defense against such attacks, as such malicious programs may escape the control of users and anti-virus applications, and therefore recommends that companies train employees on how to identify programs that contain malware and new anti-virus programs that must be used. activated. . Viruses and firewalls on corporate networks to prevent such software from being transmitted to other machines if one of the machines is infected.
OneNote is said to allow users to create and save notes, add images and attachments, and share notes with other users. It works on all major PC and smartphone operating systems, but according to the company, Windows devices are the primary target of the attack.