Attackers Use Microsoft Office To Push BlackEnergy Malware (csoonline.com)

itwbennett writes: Researchers at SentinelOne reverse engineered the latest variant of the BlackEnergy 3 rootkit (the same malware used in recent attacks against Ukraine's critical infrastructure) and found indicators that suggest it is being used by insiders and that it is the byproduct of a nation-sponsored campaign. 'BlackEnergy 3 exploits an Office 2013 vulnerability that was patched some time ago, so it only works if the target machine isn't patched or an employee (either deliberately or after being tricked into it) executes the malicious Excel document,' writes CSO's Steve Ragan.

Comments

To all the idiots ...

[Billly Gates]

... Who turn off Windows update. All I can say is told you so.

Re:To all the idiots ...

[Gravis Zero]

Turning off Windows Update puts you are grave risk of malware infection. Turning it on makes it a certainty. The only winning move is not to play. Use Linux. :)

Re:To all the idiots ...

[rtb61]

I assume you meant https://www.libreoffice.org/ Libre Office rather than Linux although subtlety in there no M$ Office on Linux of course, although in this case you could call it M$ 'open' Orifice, eww, that's bad ;).