MS Word docs help hackers mine cryptocurrency
MS Word docs help hackers mine cryptocurrency

MS Word docs help hackers mine cryptocurrency

Документы MS Word помогают хакерам майнить криптовалюту The new functionality of Microsoft Word has given cryptocurrency miners a new opportunity to mine digital finance. It’s all about the option that allows you to add a video clip to the Word document from the Web without embedding the video clip directly into the document. By copying the iframe code in the field in the pop-up form, users will be able to see the video in the document by the next opening of the file. You can download it and play by clicking on the play button. Specialists of the Israeli company Votiro found that this mechanism can be used by attackers in order to download scripts and mine the Monero cryptocurrency. As expert Amit Dory noted, two factors made this kind of attack possible: • Microsoft Word does not check where the iframe code was downloaded from; • Plots are played in the Internet Explorer browser, for example, a hacker can place a file containing a miner on his own site . In this case, the script will be launched as soon as consumers download the video and open it. But as Amit Dory emphasizes, this mining technique is economically disadvantageous. After all, scripts can only work for a short time. Moreover, hackers will be forced to constantly convince thousands of potential victims to access a Word document every day, leaving it open for a long time, but professionals believe that this functionality can be used by criminals for other purposes. For example, in order to steal account data as part of phishing campaigns.

Add comment