+- Sinisterly (https://sinister.ly)
+-- Forum: General (https://sinister.ly/Forum-General)
+--- Forum: World News (https://sinister.ly/Forum-World-News)
+--- Thread: New Maleware doesn't need any clicks (/Thread-New-Maleware-doesn-t-need-any-clicks)
New Maleware doesn't need any clicks - Ecks - 06-11-2017
You think you're safe from malware since you never click suspicious-looking links, then somebody finds a way to infect your PC anyway. Security researchers have discovered that cybercriminals have recently started using a malware downloader that installs a banking Trojan to your computer even if you don't click anything. All it takes to trigger the download is to hover your mouse pointer over a hyperlink in a carrier PowerPoint file. According to researchers from Trend Micro and Dodge This Security the technique was used by a recent spam email campaign targeting companies and organizations in Europe, the Middle East and Africa. The emails' subjects were mostly finance-related, such as "Invoice" and "Order #," with an attached PowerPoint presentation. The PowerPoint file has a single hyperlink in the center that says "Loading... please wait" that has an embedded malicious PowerShell script. When you hover your mouse pointer over the link, it executes the script.
Read more : https://www.engadget.com/2017/06/11/malware-downloader-infects-your-pc-without-a-mouse-click/
RE: New Maleware doesn't need any clicks - mothered - 06-12-2017
Getting Infected without user-Intervention, Is nothing new. Worms self-replicate and exploit vulnerabilities automatically.
It terms of "malware", well this one's quite Impressive.
RE: New Maleware doesn't need any clicks - Ecks - 06-12-2017
Yes, it was hard to think of a descent title for the post, but it does fit. As far as this technique it seems very intresting and I could see many ways it could be used (if the programmer figures it out of course) to get into previously harder targets(ie. hyperlinked images that when hovered over cause this exploit to activate).