Kaspersky: Liperesente tse 70 tsa litlhaselo tsa 2018 li ne li reretsoe ho ba kotsing ho MS Office

Lihlahisoa tsa Microsoft Office ke sepheo se ka sehloohong sa linokoane kajeno, ho latela data e hlophisitsoeng ke Kaspersky Lab. Puisanong ea eona Sebokeng sa Ts'ireletso ea Ts'ireletso, khamphani e boletse hore hoo e ka bang 70% ea litlhaselo tseo lihlahisoa tsa eona li li fumaneng ho Q4 2018 li lekile ho sebelisa hampe bofokoli ba Ofisi ea Microsoft. Ena ke makhetlo a fetang a mane palo eo Kaspersky a e boneng lilemong tse peli tse fetileng karolong ea bone ea 2016, ha bofokoli ba Ofisi bo ne bo eme ka 16%.

Kaspersky: Liperesente tse 70 tsa litlhaselo tsa 2018 li ne li reretsoe ho ba kotsing ho MS Office

Ka nako e ts'oanang, moemeli oa k'hamphani ea Kaspesky o ile a hlokomela ntlha e thahasellisang ea hore "ha ho le e 'ngoe ea bofokoli bo sebelisoang ka ho fetisisa bo fumanehang ho MS Office ka boeona. E ka ba ho nepahetseng haholoanyane ho bolela hore bofokoli bo teng likarolong tse amanang le Office. " Ka mohlala, mefokolo e 'meli e kotsi ka ho fetisisa ke CVE-2017-11882 и CVE-2018-0802, li fumanoa ho legacy Office Equation Editor, e neng e sebelisoa pele ho theha le ho hlophisa lipalo.

"Haeba u sheba bofokoli bo tsebahalang ba 2018, u ka bona hore bangoli ba malware ba khetha liphoso tse hlakileng tse bonolo ho sebelisa," k'hamphani e boletse tlhahisong eo. "Ke ka lebaka lena bofokoli ba mohlophisi oa foromo CVE-2017-11882 и CVE-2018-0802 hona joale ke tse sebelisoang haholo ho MS Office. Ka mantsoe a bonolo feela, lia tšepahala 'me li sebetsa phetolelong e' ngoe le e 'ngoe ea Word e lokollotsoeng lilemong tse 17 tse fetileng. 'Me, sa bohlokoa le ho feta, ho etsa tlatsetso bakeng sa mang kapa mang oa bona ha ho hloke tsebo e tsoetseng pele. ”

Ntle le moo, le haeba bofokoli bo sa ame ka kotloloho Microsoft Office le likarolo tsa eona, hangata ba sebelisa lifaele tsa sehlahisoa sa ofisi joalo ka sehokelo sa mahareng. Ka mohlala, CVE-2018-8174 ke bothata ho toloko ea Windows VBScript eo MS Office e e qala ha e sebetsana le mangolo a Visual Basic. Boemo bo tšoanang le CVE-2016-0189 и CVE-2018-8373, bofokoli ka bobeli bo ho enjineng ea ho ngola ea Internet Explorer, e sebelisoang hape ho lifaele tsa Office ho sebetsana le litaba tsa tepo.

Bofokoli bo boletsoeng bo likarolong tse 'nileng tsa sebelisoa ho MS Office ka lilemo tse ngata,' me ho tlosa lisebelisoa tsena ho tla senya tšebelisano ea morao le liphetolelo tsa khale tsa Office.

Ho feta moo, tlalehong e 'ngoe e hatisitsoeng khoeling e fetileng ke k'hamphani Rekota Bokamoso, e boetse e tiisa liphuputso tsa morao-rao tse tsoang ho Kaspersky Lab. Tlalehong e hlalosang bofokoli bo sebelisoang haholo ka selemo sa 2018, Recorded Future e thathamisitse likotsi tse tšeletseng tsa Liofisi maemong a leshome a holimo.

#1, #3, #5, #6, #7 le #8 ke litšitšili tsa MS Office kapa bofokoli bo ka sebelisoang hampe ka litokomane tsa lifomate tsa eona tse tšehetsoeng.

  1. CVE-2018-8174 - Microsoft (e ka sebelisoa ka lifaele tsa Office)
  2. CVE-2018-4878 - Adobe
  3. CVE-2017-11882 - Microsoft (Bofokoli ba Ofisi)
  4. CVE-2017-8750 - Microsoft
  5. CVE-2017-0199 - Microsoft (Bofokoli ba Ofisi)
  6. CVE-2016-0189 - Microsoft (e ka sebelisoa ka lifaele tsa Office)
  7. CVE-2017-8570 - Microsoft (Bofokoli ba Ofisi)
  8. CVE-2018-8373 - Microsoft (e sebelisoa ka lifaele tsa Office)
  9. CVE-2012-0158 - Microsoft
  10. CVE-2015-1805 - Google Android

Kaspersky Lab e hlalosa hore le leng la mabaka a etsang hore bofokoli ba MS Office hangata bo tobane le malware ke ka lebaka la tikoloho eohle ea botlokotsebe e teng ho potoloha sehlahisoa sa ofisi ea Microsoft. Hang ha tlhahisoleseling e mabapi le ho ba kotsing ea Ofisi e se e phatlalalitsoe, tšebeliso e mpe ea eona e hlaha 'marakeng ho Websaete e Lefifi ka mor'a matsatsi a seng makae.

'Muelli oa Kaspersky o re: "Litšitšili ka botsona li se li rarahane haholo,' me ka linako tse ling tlhaloso e qaqileng ke hore botlokotsebe ba marang-rang bo hloka feela ho sebelisa monyetla oa ho sebetsa." Ka nako e ts'oanang, joalo ka ha ho boletsoe ke Leigh-Ann Galloway, hlooho ea cybersecurity ho Litheknoloji tse Ntle: "Hangata, ho phatlalatsa khoutu ea demo bakeng sa bofokoli ba letsatsi le le leng le likokoana-hloko tse sa tsoa patoa hangata ho thusitse linokoane ho feta kamoo ho sirelelitseng basebelisi ba ho qetela."



Source: 3dnews.ru

Eketsa ka tlhaloso