A security breach in Word allows your computer to be infected with malware without your knowledge
Table of contents:
When we talk about network security we always think about the configuration of our equipment, our Wi-Fi network and, of course, the operating system we use. There are many aspects to take into account that make us divert our attention from other no less important such as the programs we use daily.
And it is that through a security breach in a specific program, a surprise that is not at all pleasant can enter our team. And that is what Microsoft Word seems to be suffering from, because a weakness has been discovered that puts users who use the suite's text editor at risk Microsoft office automation.
Specifically the failure is related to a malicious code in the form of an email attachment These are Word documents that make use of rich text have inserted an access link to a website in question. A problem that is unleashed when the unsuspecting user clicks on that link taking him to a website that surely has nothing to do with what was expected.
Thus, when clicking on the HTML link this remits us to a remote server that inserts _malware_ into our equipment without our knowing it and therefore it leaves us helpless until it is too late.
For now, just be careful
Almost all versions of Office are affected, even in Office 2016 for Windows 10 and what is striking about the case is that compared to the warnings that Office usually gives to links of this type, in this case it does nothing, remaining unchanged.
The bug was discovered by the FireEye team in January, being communicated to Microsoft last weekend so that it has not been reported made public until Redmond has notified that they have a solution to curb the incidence.
It will be tomorrow April 11 with the arrival of the Creators Update when Microsoft will launch the corresponding patch that will put a stop to this security flaw and meanwhile we can only have Be careful with Word documents that we are going to use and that contain an HTML link.
Via | Fireeye In Xataka | Microsoft seeks to increase security on its computers with the launch of Microsoft Authenticator