Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

Mouse over link to get pwned - New infection vector

Share and discuss recent and important events about malware, privacy, or security. User contributed news. Please do not copy and paste full news stories. Please do quote the essential paragraph of the story. Provide a link to the source.

Mouse over link to get pwned - New infection vector

Unread postby Sludge3000 » June 29th, 2017, 7:39 am

Researchers have found a new form of attack that abuses the action of hovering over hyperlinked text and images in a Microsoft PowerPoint presentation.

Trend Micro researchers discovered the "mouseover" technique, used by a Trojan downloader also found in a spam campaign hitting EMEA businesses in the manufacturing, education, pyrotechnics, logistics, and device fabrication industries. The downloader they analyzed delivers a version of the OTLARD banking Trojan, also known as GootKit.


Article @ DarkReading
Trend Micro Blog

The sample found in the wild by TrendMicro was highly targeted however now this information is in the public domain, it is likely to be found in more widespread use in the near future.
The original file used, displayed a hyper-linked "loading" page and if the user moused over the hyperlink, was then infected. As always, if you receive unsolicited spam, delete it immediately.
The vulnerability affects Microsoft PowerPoint (full version) and does not affect Microsoft PowerPoint Online. Other presentation software (Such as OpenOffice Impress) does not appear to be affected.

Sludge
User avatar
Sludge3000
Regular Member
 
Posts: 695
Joined: April 15th, 2009, 3:47 pm
Location: Somewhere fluffy
Advertisement
Register to Remove

Re: Mouse over link to get pwned - New infection vector

Unread postby Sludge3000 » June 29th, 2017, 7:42 am

ZB
User avatar
Sludge3000
Regular Member
 
Posts: 695
Joined: April 15th, 2009, 3:47 pm
Location: Somewhere fluffy


  • Similar Topics
    Replies
    Views
    Last post

Return to Security News



Who is online

Users browsing this forum: No registered users and 6 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware