Basic PC Tips

New email attachment security threat

A new threat to computer users has been discovered that exploits a previously unknown security hole in Microsoft Word.

Hackers in China and Taiwan have been distributing sophisticated emails that look like they have been sent from within your company - they even include signatures and are addressed to the person receiving the email.

When opened, the attachment to this email installs software on the user's computer that sends back information to a server in China. Also it allows the attacker to create, read, write, delete and search for files and directories; access and modify the Registry; manipulate services; start and kill processes; take screenshots; enumerate open windows; create its own application window; and lock, restart or shut down Windows.

When the infected attachment is opened it will immediately overwrite itself with a blank Word document causing Word to crash and effectively hiding the fact that it has been received.

This threat effects all computers that receive it - even ones that have all the current Microsoft security patches installed.

To read more information about this threat click here.

This highlights the potential problem of email attachments and how you should always be extremely cautions when opening them. This is especially true of document formats that can include macros such as Word and Excel.