Microsoft: Windows, Mac malware gets in via Adobe, Java, Office
Summary: Microsoft has outlined the main third-party software through which cross-platform attacks Windows, Mac, and Linux computers: old vulnerabilities in Java, Adobe Flash, Adobe PDF applications, and Microsoft Office.
Microsoft has been doing some research into all the recent cross-platform malware (1, 2, 3) that attacks Windows, Macs, and sometimes even Linux. The company has concluded that current attacks exploit third-party vulnerabilities in software on these platforms. There are two ways the malicious code is being delivered, according to the software giant: via the Web and via e-mail attachments.
More specifically, Microsoft has found cybercriminals are currently leveraging 12 vulnerabilities in Java, seven in Adobe Flash, three in Adobe PDF applications, and three in Microsoft Office (one in Excel, two in Word). All of these can be used to target and attack multiple platforms. Since Java had the most, Microsoft has already recommended that you update it or kill it.
While these results are merely based on the samples Microsoft has identified, acquired, and processed, they confirm a trend other security researchers have been seeing with cross-platform vulnerabilities. It's basic economics. Malware writers love using a cross-platform plugin as an attack vector because it allows them to target more than one operating system, and thus more potential users. As such, we can expect the value and demand for these flaws to continue.
The most important thing to note is that all these aforementioned vulnerabilities have been patched. In fact, some of them are quite old. The security holes being exploited in Microsoft's software date back to 2009, the vulnerabilities in Adobe's software go back to 2010 and 2011, and the Java flaws range from 2010 to 2012.
"This highlights the importance of keeping security software up-to-date, and ensuring operating system and 3rd party security patches are installed (soon after they become available) in order to reduce the risk of malware infection," a Microsoft spokesperson said in a statement. "And, this best practice should extend to all devices and platforms, especially those in large enterprise networks."
See also:
- Microsoft: Update Java or kill it
- Cross-platform malware exploits Java to attack PCs and Macs
- Cross-platform Trojan checks your OS: Attacks Windows, Mac, Linux
- Cross-platform Trojan attacks Windows, Intel Macs, Linux
- New targeted Mac OS X Trojan requires no user interaction
- Over 600,000 Macs infected with Flashback Trojan
Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.
Talkback
So it sounds like Microsoft is saying that if you want a safe computer
Sounds fair enough.
Not that at all
Does this sound fair?
And speaking of Microsoft Office, I wonder what percentage of Windows users have switched to Microsoft Update in lieu of Windows Update. Because, you know ...
P.S. Just to be fair and even-handed.
well
Ummm...
I guess haters are going to hate though. And how is this fair and even-handed? As Apple/OS X has shown us, if you aren't getting bombarded with attacks, it is assume you are safe- the whole security by obscurity. Sounds like you're safe to me! Ask all the virgin girls that didn't use any form of birth control their first time and you'll find that, gasp... it only takes one time to get knocked up! It only takes one piece of malware to screw up a system.
security and obscurity
Yeah it does
http://www.youtube.com/watch?v=k4EbCkotKPU&feature=player_detailpage
RE: Terrible advice
1. Using an alternate office suite will help make one immune to exploits that specifically target Microsoft Office. There are several proprietary and open-source alternatives that support Windows. As an example, if one had used either OpenOffice or LibreOffice to open the malicious Word document associate with Duqu, there would have been no infection as these open-source office suites do not support embedded fonts.
2. If one uses Microsoft Office (I agree that it is the gold standard), then enable Microsoft Update to make sure that security updates are applied. You see, Windows Update, which defaults on Windows, does not include security updates (or any other updates) for Microsoft Office. Thus, my question as to how many Windows users running Microsoft Office have switched to Microsoft Update.
Cheers.
Note to Emil: You need to start recommending Microsoft Update to users when Microsoft Office exploits are discussed in the blog article.
MS Office
Yeah, as if Microsoft has a history of virus-free products...
And who needs all that when mere phishing can be good enough, if you can do what it takes to spoof.
updates
Say on most GNU/Linux distros and *BSD all updates (and installations) are done from a few secure sources in one chunk with virtually only one click. You do not have to reboot the system except for the kernel updates, unlike Windows. Whereas, Microsoft Windows and Mac OSX leave users on their own with the so called "3-d party software" updates.
So if you really care about security GNU/Linux or *BSD would your best choice.
old think
are you sure, you update?
Read Steven Sinofsky from MSFT on that:
http://blogs.msdn.com/b/b8/archive/2011/11/14/minimizing-restarts-after-automatic-updating-in-windows-update.aspx
Windows reboot after update
Useless blog, as usual
Useless blog, as usual
Useless blog, as usual
I'm not sure if it's a glitch
It's the new talkback
Java Developers - www.aegisisc.com