ʻO nā huahana Microsoft Office kahi pahuhopu nui no nā hackers i kēia lā, e like me ka ʻikepili i hōʻuluʻulu ʻia e Kaspersky Lab. I kāna hōʻike ʻana ma ka Security Analyst Summit, ua ʻōlelo ka hui ma kahi o 70% o nā hoʻouka ʻana i kāna huahana i ʻike ʻia ma Q4 2018 i hoʻāʻo e hoʻohana i nā nāwaliwali o Microsoft Office. ʻOi aku kēia ma mua o ʻehā mau manawa o ka pākēneka i ʻike ʻia e Kaspersky i ʻelua makahiki i hala ma ka hapahā ʻehā o 2016, i ka wā i kū ai nā nāwaliwali o ke Office ma kahi haʻahaʻa 16%.
Ma ka manawa like, ua ʻike kahi ʻelele o ka hui Kaspesky i kahi mea hoihoi "ʻaʻole i loaʻa kekahi o nā mea palupalu i hoʻohana pinepine ʻia ma MS Office ponoʻī. E ʻoi aku ka pololei o ka ʻōlelo ʻana aia nā mea palupalu i nā mea pili i ke Office. " ʻO kahi laʻana, ʻelua mau pilikia weliweli loa CVE-2017-11882 и CVE-2018-0802, aia ma ka Office Equation Editor, i hoʻohana mua ʻia e hana a hoʻoponopono i nā hoohalike.
"Inā ʻoe e nānā i nā nāwaliwali kaulana o 2018, hiki iā ʻoe ke ʻike i nā mea kākau malware makemake i nā hewa loiloi maʻalahi," i ʻōlelo ʻia e ka hui ma ka hōʻike. "ʻO kēia ke kumu i nāwaliwali ai ka mea hoʻoponopono formula CVE-2017-11882 и CVE-2018-0802 i kēia manawa ka mea maʻamau i hoʻohana ʻia ma MS Office. Ma ka maʻalahi, hilinaʻi lākou a hana i kēlā me kēia mana o Word i hoʻokuʻu ʻia i nā makahiki he 17 i hala. A ʻo ka mea nui loa, ʻo ka hana ʻana i kahi hoʻohana no kekahi o lākou ʻaʻole pono nā mākau holomua.
Eia kekahi, ʻoiai inā ʻaʻole pili pono nā nāwaliwali iā Microsoft Office a me kāna mau ʻāpana, hoʻohana pinepine lākou i nā faila huahana o ke keʻena ma ke ʻano he loulou waena. ʻo kahi laʻana, CVE-2018-8174 he kino ia i ka unuhi ʻōlelo Windows VBScript a MS Office e hoʻomaka ai i ka wā e hoʻoponopono ai i nā palapala Visual Basic. ʻO kahi kūlana like me CVE-2016-0189 и CVE-2018-8373, aia nā haʻahaʻa ʻelua i loko o ka ʻenekini hōʻailona Internet Explorer, kahi i hoʻohana ʻia i nā faila Office e hoʻoponopono i ka ʻike pūnaewele.
Aia nā mea nāwaliwali i ʻōlelo ʻia i loko o nā ʻāpana i hoʻohana ʻia ma MS Office no nā makahiki he nui, a ʻo ka wehe ʻana i kēia mau mea hana e wāwahi i ka hoʻohālikelike ʻana me nā mana kahiko o Office.
Eia kekahi, ma kahi hōʻike hou i paʻi ʻia i ka mahina i hala e ka hui , hōʻoia pū i nā ʻike hou mai Kaspersky Lab. Ma kahi hōʻike e hōʻike ana i nā nāwaliwali maʻamau i hoʻohana ʻia ma 2018, Recorded Future i papa inoa i ʻeono mau nāwaliwali o ke keʻena ma nā papa heʻumi.
ʻO #1, #3, #5, #6, #7 a me #8 ʻo ia nā ʻōpala MS Office a i ʻole nā haʻahaʻa hiki ke hoʻohana ʻia ma o nā palapala i kāna mau ʻano kākoʻo.
- - Microsoft (hiki ke hoʻohana ʻia ma o nā faila Office)
- CVE-2018-4878 – Adobe
- - Microsoft (ke keʻena hewa)
- CVE-2017-8750 – Microsoft
- - Microsoft (ke keʻena hewa)
- - Microsoft (hiki ke hoʻohana ʻia ma o nā faila Office)
- - Microsoft (ke keʻena hewa)
- - Microsoft (hiki ke hoʻohana ʻia ma o nā faila Office)
- CVE-2012-0158 – Microsoft
- CVE-2015-1805 – Google Android
Ua wehewehe ʻo Kaspersky Lab ʻo kekahi o nā kumu i ʻike pinepine ʻia ai nā nāwaliwali o MS Office e ka malware ma muli o ke kaiaola kalaima holoʻokoʻa e noho nei a puni ka huahana Microsoft office. Ke lilo ka ʻike e pili ana i kahi haʻahaʻa Office i ka lehulehu, ʻike ʻia kahi hoʻohana ʻana ma ka mākeke ma ka Pūnaewele ʻeleʻele i loko o kekahi mau lā.
"Ua liʻiliʻi ka paʻakikī o nā pōpoki, a i kekahi manawa ʻo ka wehewehe kikoʻī wale nō ka mea e pono ai ka cybercriminal e hana i kahi hana hana," wahi a kahi ʻōlelo a Kaspersky. I ka manawa like, e like me ka mea i hōʻike ʻia e Leigh-Ann Galloway, ke poʻo o ka cybersecurity ma : "ʻO ka manawa a me ka manawa, ka paʻi ʻana i ka code demo no nā nāwaliwali o ka lā a me nā pōpoki palekana hou i kōkua pinepine i nā mea hackers ma mua o ka pale ʻana i nā mea hoʻohana hope."
Source: 3dnews.ru