Security News > 2023 > August > Hackers can abuse Microsoft Office executables to download malware

The main executable for the Microsoft Publisher application has already been confirmed that it can download payloads from a remote server.
According to recent research, even executables that are not signed by Microsoft serve purposes that are useful in attacks, such as reconnaissance.
Microsoft shares fix for some Outlook hyperlinks not opening.
Microsoft shares temp fix for Outlook Desktop slow saving bug.
Stolen Microsoft key offered widespread access to Microsoft cloud services.
Microsoft investigates Outlook.com bug breaking email search.
News URL
Related news
- Microsoft releases emergency update to fix Office 2016 crashes (source)
- Chinese Hackers Target Linux Systems Using SNOWLIGHT Malware and VShell Tool (source)
- Microsoft blocks ActiveX by default in Microsoft 365, Office 2024 (source)
- State-Sponsored Hackers Weaponize ClickFix Tactic in Targeted Malware Campaigns (source)
- Microsoft: Office 2016 and Office 2019 reach end of support in October (source)
- Chinese hackers target Russian govt with upgraded RAT malware (source)
- Hackers Abuse Russian Bulletproof Host Proton66 for Global Attacks and Malware Delivery (source)
- Russian Hackers Exploit Microsoft OAuth to Target Ukraine Allies via Signal and WhatsApp (source)
- Iran-Linked Hackers Target Israel with MURKYTOUR Malware via Fake Job Campaign (source)
- Hackers abuse OAuth 2.0 workflows to hijack Microsoft 365 accounts (source)