Kaspersky: 70 peresenti ya ziwopsezo mu 2018 zidali zowopsa ku MS Office

Zogulitsa za Microsoft Office ndizofunikira kwambiri kwa obera masiku ano, malinga ndi deta yopangidwa ndi Kaspersky Lab. M'mawu ake pa Security Analyst Summit, kampaniyo idati pafupifupi 70% ya zomwe zidapezeka mu Q4 2018 zidayesa kugwiritsa ntchito ziwopsezo za Microsoft Office. Izi ndizoposa kanayi kuchuluka kwa Kaspersky adawona zaka ziwiri zapitazo mgawo lachinayi la 2016, pomwe zofooka za Office zidayima pa 16%.

Nthawi yomweyo, woimira kampani ya Kaspesky adawona mfundo yosangalatsa yakuti "palibe zovuta zomwe zimagwiritsidwa ntchito kwambiri zomwe zimapezeka mu MS Office palokha. Zingakhale zolondola kunena kuti zofooka zilipo pazinthu zokhudzana ndi Office. " Mwachitsanzo, ziwopsezo ziwiri zowopsa kwambiri ndizo CVE-2017-11882 и CVE-2018-0802, akupezeka mu legacy Office Equation Editor, yomwe idagwiritsidwa ntchito popanga ndi kusintha ma equation.

"Mukayang'ana zovuta zodziwika bwino za 2018, mutha kuwona kuti olemba pulogalamu yaumbanda amakonda zolakwa zosavuta kugwiritsa ntchito," kampaniyo idatero pofotokoza. "Ichi ndichifukwa chake zovuta za formula editor CVE-2017-11882 и CVE-2018-0802 pakali pano amagwiritsidwa ntchito kwambiri mu MS Office. Mwachidule, iwo ndi odalirika ndipo amagwira ntchito mu mtundu uliwonse wa Mawu otulutsidwa m'zaka 17 zapitazi. Ndipo, chofunika kwambiri, kupanga mwayi kwa aliyense wa iwo sikufuna luso lapamwamba. ”

Kuphatikiza apo, ngakhale zofooka sizikhudza mwachindunji Microsoft Office ndi zigawo zake, nthawi zambiri amagwiritsa ntchito mafayilo amaofesi ngati ulalo wapakatikati. Mwachitsanzo, CVE-2018-8174 ndi cholakwika mu Windows VBScript yomasulira yomwe MS Office imakhazikitsa pokonza zolembedwa za Visual Basic. Mkhalidwe wofanana ndi CVE-2016-0189 и CVE-2018-8373, zofooka zonse zili mu injini yolembera ya Internet Explorer, yomwe imagwiritsidwanso ntchito mu mafayilo a Office kukonza zomwe zili pa intaneti.

Zofooka zomwe zatchulidwazi zili m'zigawo zomwe zakhala zikugwiritsidwa ntchito mu MS Office kwa zaka zambiri, ndipo kuchotsa zida izi kusokoneza kuyanjana ndi ma Office akale.

Kuphatikiza apo, mu lipoti lina lofalitsidwa mwezi watha ndi kampaniyo Recorder future, imatsimikiziranso zomwe zapezedwa posachedwa kuchokera ku Kaspersky Lab. Mu lipoti lofotokoza za zovuta zomwe zimagwiritsidwa ntchito kwambiri mu 2018, Recorded Future idalemba zovuta zisanu ndi chimodzi za Office pamasanjidwe khumi apamwamba.

#1, #3, #5, #6, #7 ndi #8 ndi zolakwika kapena zovuta za MS Office zomwe zitha kugwiritsidwa ntchito kudzera m'makalata omwe amathandizidwa.

1. CVE-2018-8174 - Microsoft (yosavuta kugwiritsa ntchito mafayilo a Office)
2. CVE-2018-4878 - Adobe
3. CVE-2017-11882 - Microsoft (Office cholakwika)
4. CVE-2017-8750 - Microsoft
5. CVE-2017-0199 - Microsoft (Office cholakwika)
6. CVE-2016-0189 - Microsoft (yosavuta kugwiritsa ntchito mafayilo a Office)
7. CVE-2017-8570 - Microsoft (Office cholakwika)
8. CVE-2018-8373 - Microsoft (yosavuta kugwiritsa ntchito mafayilo a Office)
9. CVE-2012-0158 - Microsoft
10. CVE-2015-1805 - Google Android

Kaspersky Lab akufotokoza kuti chimodzi mwazifukwa zomwe ziwopsezo za MS Office nthawi zambiri zimangoyang'aniridwa ndi pulogalamu yaumbanda ndi chifukwa cha chilengedwe chonse chaupandu chomwe chilipo pafupi ndi Microsoft Office. Zambiri zokhudzana ndi chiwopsezo cha Office zikadziwika, kugwiritsa ntchito bwino kumawonekera pamsika pa Webusayiti Yamdima pakangopita masiku ochepa.

Mneneri wa Kaspersky anati: "Nsikidzi zokha zakhala zovuta kwambiri, ndipo nthawi zina kufotokozera mwatsatanetsatane ndizomwe zigawenga zapaintaneti zimafunikira kuti agwiritse ntchito," atero a Kaspersky. Pa nthawi yomweyo, monga ananenera Leigh-Ann Galloway, mkulu wa cybersecurity pa Positive Technologies: "Nthawi zambiri, kusindikiza nambala yachiwonetsero pazachiwopsezo chatsiku liziro komanso zolakwika zachitetezo zomwe zangokhazikitsidwa kumene nthawi zambiri zathandiza obera kuposa momwe amatetezera ogwiritsa ntchito."

Source: 3dnews.ru