Microsoft Teams Can Be Used To Execute Arbitrary Payloads

guest · Sep 10, 2019

Microsoft Teams Can Be Used To Execute Arbitrary Payloads
September 10, 2019
https://www.bleepingcomputer.com/ne...ms-can-be-used-to-execute-arbitrary-payloads/

Attackers can use genuine binaries from Microsoft Teams to execute a malicious payload using a mock installation folder for the collaboration software.
The problem affects most Windows desktop apps that use Squirrel installation and update framework, which uses NuGet packages.
Easy to build package
Reverse engineer Reegun Richard found that he could create a fake Microsoft Teams package and use a signed binary to execute anything present in a specific location.
One notable aspect of the experiment is that no resources are required on the target system other than the minimum package created by the attacker.

Microsoft is aware of the problem but decided not to address it. The researcher says that the reason the company gave him was that the glitch "did not meet the bar of security issue."
The researcher explains that not all NuGet packages are vulnerable but all apps relying on the Squirrel one-click installer are.
Click to expand...

Log in or Sign up

Microsoft Teams Can Be Used To Execute Arbitrary Payloads

guest Guest

Log in or Sign up

Microsoft Teams Can Be Used To Execute Arbitrary Payloads

guest Guest

Useful Searches