 |
| On cyber security, hackers exploit two windows vulnerability, search and Wi-Fi to attack users PC |
Your PC is currently vulnerable to two significant cyber threats rooted in basic Windows features: one exploiting Windows search and the other a Wi-Fi vulnerability.
The first threat leverages Windows search in a "clever" way, as reported by Trustwave. Hackers begin by tricking users into downloading malware through phishing emails with malicious .ZIP attachments containing HTML files disguised as invoices. Opening the HTML file triggers your browser and engages Windows Explorer’s search feature. Windows Explorer searches for files named “INVOICE” and relabels the search results as “Downloads,” misleading users into thinking they are viewing their downloads. A batch script then initiates further malicious activities. The specific malware distributed through this method is currently unknown.
To mitigate this threat, users can disable the search-ms/search URI protocol handlers by deleting the related registry entries. Additionally, users should verify the legitimacy of email senders, be wary of unusual file extensions, and treat urgent action requests as potential phishing scams.
The second vulnerability is more severe. Microsoft is addressing a security flaw in the Windows Wi-Fi driver that allows hackers to execute malicious code on a PC within public Wi-Fi range without needing prior access. This vulnerability, detailed in CVE-2024-30078 and rated "Important," affects all modern versions of Windows Server and Windows. It bypasses all authentication protocols and requires no user interaction.
This flaw highlights the risks of connecting to public Wi-Fi networks. Users with unpatched versions of Windows 10, Windows 11, or Windows Server versions from 2008 onward are at risk. Microsoft released a fix on June 11 addressing 49 CVEs across Windows, Office, Azure Dynamic Business Central, Visual Studio, and their components.
These dual threats emphasize the importance of vigilance against cyber attacks and the necessity of keeping all software and security patches up to date.
0 Comments