Report: Attacks using Microsoft Office

Rising number of malicious e-mails use Microsoft Office attachments to target specific corporate, government users.


NEW YORK (CNNMoney.com) -- A rising number of cyberattacks are taking aim at specific individuals at critical government agencies and corporations using e-mails with corrupted Microsoft Office files, according to a published report.

USA Today reported that opening up one of the corrupted files that is attached to an e-mail relinquishes control of the PC without the user's knowledge. The cyberattacks are targeting federal agencies and defense and nuclear contractors, according to the report.

New targeted cyberattacks are reportedly using Microsoft Office attachments to e-mails.
New targeted cyberattacks are reportedly using Microsoft Office attachments to e-mails.

Security firm MessageLabs says it has been intercepting a series of attacks from PCs in Taiwan and China since November, the paper reports. In early 2006, there were one or two such attacks a week, but by March MessageLabs intercepted 716 e-mails carrying corrupted Office files. They were sent to 216 different agencies and companies, according to the paper.

"The attacks are working," Alan Paller, research director at security think tank The SANS Institute, told the paper. "Penetrations are deep and broad."

The Office file attacks are "very targeted and very limited," Mark Miller, director of security response for Microsoft (Charts, Fortune 500), told the paper. Top of page

Sponsors

Most stock quote data provided by BATS. Market indices are shown in real time, except for the DJIA, which is delayed by two minutes. All times are ET. Disclaimer. Morningstar: © 2018 Morningstar, Inc. All Rights Reserved. Factset: FactSet Research Systems Inc. 2018. All rights reserved. Chicago Mercantile Association: Certain market data is the property of Chicago Mercantile Exchange Inc. and its licensors. All rights reserved. Dow Jones: The Dow Jones branded indices are proprietary to and are calculated, distributed and marketed by DJI Opco, a subsidiary of S&P Dow Jones Indices LLC and have been licensed for use to S&P Opco, LLC and CNN. Standard & Poor's and S&P are registered trademarks of Standard & Poor's Financial Services LLC and Dow Jones is a registered trademark of Dow Jones Trademark Holdings LLC. All content of the Dow Jones branded indices © S&P Dow Jones Indices LLC 2018 and/or its affiliates.

Most stock quote data provided by BATS. Market indices are shown in real time, except for the DJIA, which is delayed by two minutes. All times are ET. Disclaimer. Morningstar: © 2018 Morningstar, Inc. All Rights Reserved. Factset: FactSet Research Systems Inc. 2018. All rights reserved. Chicago Mercantile Association: Certain market data is the property of Chicago Mercantile Exchange Inc. and its licensors. All rights reserved. Dow Jones: The Dow Jones branded indices are proprietary to and are calculated, distributed and marketed by DJI Opco, a subsidiary of S&P Dow Jones Indices LLC and have been licensed for use to S&P Opco, LLC and CNN. Standard & Poor's and S&P are registered trademarks of Standard & Poor's Financial Services LLC and Dow Jones is a registered trademark of Dow Jones Trademark Holdings LLC. All content of the Dow Jones branded indices © S&P Dow Jones Indices LLC 2018 and/or its affiliates.