Security News > 2023 > August > Hackers can abuse Microsoft Office executables to download malware

The main executable for the Microsoft Publisher application has already been confirmed that it can download payloads from a remote server.
According to recent research, even executables that are not signed by Microsoft serve purposes that are useful in attacks, such as reconnaissance.
Microsoft shares fix for some Outlook hyperlinks not opening.
Microsoft shares temp fix for Outlook Desktop slow saving bug.
Stolen Microsoft key offered widespread access to Microsoft cloud services.
Microsoft investigates Outlook.com bug breaking email search.
News URL
Related news
- Fake Microsoft Office add-in tools push malware via SourceForge (source)
- Microsoft: New RAT malware used for crypto theft, reconnaissance (source)
- Microsoft Trust Signing service abused to code-sign malware (source)
- Microsoft Trusted Signing service abused to code-sign malware (source)
- New Android malware uses Microsoft’s .NET MAUI to evade detection (source)
- Top 3 MS Office Exploits Hackers Use in 2025 – Stay Alert! (source)
- Microsoft: New Windows scheduled task will launch Office apps faster (source)
- Chinese FamousSparrow hackers deploy upgraded malware in attacks (source)
- Android Malware Exploits a Microsoft-Related Security Blind Spot to Avoid Detection (source)
- Microsoft Warns of Tax-Themed Email Attacks Using PDFs and QR Codes to Deliver Malware (source)