Shulou(Shulou.com)11/24 Report--

CTOnews.com March 15 news, Google security team Threat Analysis Group said in the latest blog post, found in Microsoft's SmartScreen security vulnerabilities, allowing attackers to distribute Magniber blackmail software.

Microsoft has released cumulative updates for Win10 and Win11 systems to fix the above vulnerabilities during today's March Patch Tuesday event.

With regard to this vulnerability, CTOnews.com translated Google blog posts as follows:

The attacker signed and distributed the MSI file using an invalid but specially crafted Authenticode signature. This malformed signature can cause SmartScreen to return an error that can cause a security warning dialog box displayed to the user to be bypassed after accessing an untrusted file that contains a network token (MotW), indicating that a potentially malicious file has been downloaded from Internet.

According to the blog post, Google's threat analysis team has found that these MSI files have been downloaded more than 100000 times since January 2023, the vast majority of which occurred in Europe. Google added that secure browsing in Chrome browsers has successfully detected more than 90 per cent of these malicious files.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.