December 19, 2017

Microsoft Word slams the door on DDEAUTO malware attacks

Remember how Microsoft said that DDEAUTO was a "feature", not a vulnerability? Well, it just changed its mind - for Word, at least.

Naked Security

April 24, 2017

Ransomware hidden inside a Word document that’s hidden inside a PDF

Spam campaign delivers Locky ransomware that, like a Russian matryoshka doll, is nested inside not one but two layers

Naked Security

April 11, 2017

Microsoft patches Word zero-day booby-trap exploit

All versions of Office on all versions of Windows are vulnerable to this zero-day that spreads malware, so make sure you patch quickly

Naked Security

October 20, 2016

Ancalog – the document exploit tool that makes cybercrime easy

SophosLabs presents a fascinating new paper explaining how malware tools like Ancalog help non-techie crooks get straight into cybercrime...

Naked Security

July 05, 2016

Is Zepto ransomware the new Locky?

Beware the latest arrival on the ransomware scene: Zepto. We tell you what to look for, and what you can do.

Naked Security

July 01, 2016

Anatomy of an exploit – the Microsoft Word bug that just won’t die

Surely most of us have updated Office at least once in the last four years?

Naked Security

February 29, 2016

The “HawkEye” attack: how cybercrooks target small businesses for big money

Here's a type of malware attack that makes it easy for low-tech criminals to pull off high-tech crimes...

Naked Security

December 18, 2015

Crooks update their exploits – have you updated your Office?

For 3 years, the same Office exploit has topped the charts of criminal usage - but there's a new kid on the block.

Naked Security

September 28, 2015

Why Word “macro malware” is back, and what you can do about it…

Cybercrooks have been getting back into VBA malware, or "macro viruses," as they used to be called. We explain why, and give you 2 tips on what to do.

Naked Security