Kaspersky: 70 percent of attacks now target Office vulnerabilities

guest · Apr 15, 2019

Kaspersky: 70 percent of attacks now target Office vulnerabilities
That's more than four times the percentage the company was seeing two years before, in Q4 2016
April 15, 2019
https://www.zdnet.com/article/kaspersky-70-percent-of-attacks-now-target-office-vulnerabilities/

In a presentation at its security conference --the Security Analyst Summit-- the company said that around 70 percent of the attacks its products have detected in Q4 2018 are trying to abuse a Microsoft Office vulnerability.

That's more than four times the percentage the company was seeing two years before, in Q4 2016, when Office vulnerabilities had accounted for a meager 16 percent.
ATTACKS TARGET OUTDATED OFFICE COMPONENTS
"An interesting side note," Kaspersky said. "None of the top most exploited vulnerabilities are in MS Office itself. Rather, the vulnerabilities exist in related components."
For example, two of the most exploited vulnerabilities, CVE-2017-11882 and CVE-2018-0802, impact Office's legacy Equation Editor component.

Furthermore, even if the vulnerabilities don't impact Microsoft Office and its components directly, they are exploited via Office files.
Click to expand...

Kaspersky blog: Microsoft Office and its vulnerabilities

guest · Jul 22, 2022

Microsoft Office Most Exploited Software in Malware Attacks – Report
Research reveals that around 80% of all malware attacks used MS Office flaws
July 21, 2022

Atlas VPN has shared its findings for Q1 2022, in which the company revealed startling stats about Microsoft Office. Reportedly, Microsoft Office has become the most commonly exploited software in malware attacks.

It is a fact that most Microsoft Office security flaws are publicly known which makes it easy for cybercriminals to exploit them. On the other hand, because most users ignore essential software updates, scammers can easily inject malicious code after exploiting security loopholes.
Click to expand...

According to researchers, some Microsoft Office vulnerabilities are being exploited more than others. These include the following:

CVE-2018-0802

CVE-2017-8570

CVE-2017-11882

Click to expand...

Atlas VPN wrote that around 78.5% of all malware attacks are launched by targeting Microsoft Office vulnerabilities. Per the Q4 2021 data shared by Kaspersky’s malware research platform Securelist, Microsoft was targeted in 61% of the attacks last year.

Therefore, it can be assumed that hackers are increasingly abusing MS Office, and there’s been a rise in software exploitation since last year.
Click to expand...

atlasVPN: Microsoft Office flaws exploited in nearly 80% of malware attacks

One quarter after another, Microsoft Office remains the most widely exploited software for malware delivery. The primary reason is that a significant portion of Office users delay essential security updates, which keeps the doors open for fraudsters to inject malicious code through various loopholes, even if they are already known publicly.
Click to expand...

Log in or Sign up

Kaspersky: 70 percent of attacks now target Office vulnerabilities

guest Guest

guest Guest

Log in or Sign up

Kaspersky: 70 percent of attacks now target Office vulnerabilities

guest Guest

guest Guest

Useful Searches