New Word Zero-day

There is a new zero-day that is floating around, which affects all users of Microsoft Word. It downloads a “full control” rootkit thereby giving complete control of your PC to an attacker.

Since this is a previously unknown vulnerability, there’s no patch to stop this attack vector from working and the exploit is so new that many anti-virus vendors haven’t been able to create/publish new signatures yet. (But even if every AV company already had new signatures, there’s often a significant lag between publishing the updates and getting them installed on everyone’s desktop.)

As always, do not open email attachments unless you are 100% certain that the email came from the individual it says it did. Email headers are easy to forge so be very careful. Users are the best defense in times like these. Make us proud and show that the average computer user really can be careful when absolutely necessary.

Subscribe, Trackback or Bookmark?

No Comments on “New Word Zero-day”

Write a comment

(required)

(required, but not published)

(optional)

You may use only these tags: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <code> <em> <i> <strike> <strong>