Current:Home > Contact'Criminals are preying on Windows users': Software subject of CISA, cybersecurity warnings -FutureWise Finance
'Criminals are preying on Windows users': Software subject of CISA, cybersecurity warnings
View
Date:2025-04-13 22:03:58
The U.S. Cybersecurity and Infrastructure Security Agency added a vulnerability in Microsoft's Windows 10 software to a list of exploited security weak spots.
CISA said that "Microsoft COM for Windows contains a deserialization of untrusted data vulnerability that allows for privilege escalation and remote code execution," in a listing added to the agency's Known Exploited Vulnerability Catalog Monday.
The listing advised users to stop using software or utilize a patch through Windows.
CISA said that it did not know if the vulnerability, titled CVE-2018-0824, had been used in a ransomware campaign but a CISCO Talos report released Thursday said that a Chinese hacking group utilized the vulnerability in an attack on a Taiwanese government research center. The report said the center was, "likely compromised."
Second organization issues Windows warning
CISA was not the only organization to issue a warning to Windows users Monday.
"Criminals are preying on Windows users yet again, this time in an effort to hit them with a keylogger that can also steal credentials and take screenshots," enterprise technology news site the Register reported Monday.
The outlet reported that FortiGuard Labs, a threat intelligence agency, found an uptick in malware attacks with SnakeKeylogger. The malware is known to steal credentials and record keystrokes in infected machines.
It was originally sold on a subscription basis on Russian crime forums and became a major threat in 2020, according to the Register.
In 2022 Check Point Research, a cyber security firm, warned that the malware, "is usually spread through emails that include docx or xlsx attachments with malicious macros," and through PDF files.
The warnings come on the heels of the "Crowdstrike outage" in July, where a defective software update rendered devices using Windows software useless for hours.
veryGood! (125)
Related
- Federal Spending Freeze Could Have Widespread Impact on Environment, Emergency Management
- Chief Environmental Justice Official at EPA Resigns, With Plea to Pruitt to Protect Vulnerable Communities
- Raquel Leviss Wants to Share Unfiltered Truth About Scandoval After Finishing Treatment
- With Democratic Majority, Climate Change Is Back on U.S. House Agenda
- Rylee Arnold Shares a Long
- California Ups Its Clean Energy Game: Gov. Brown Signs 100% Zero-Carbon Electricity Bill
- Emily Blunt Shares Insight into Family Life With Her and John Krasinski’s Daughters
- The Senate Reinstates Methane Emissions Regulations Rolled Back by Trump, Marking a Clear Win for Climate Activists
- Newly elected West Virginia lawmaker arrested and accused of making terroristic threats
- How Khloe Kardashian Is Setting Boundaries With Ex Tristan Thompson After Cheating Scandal
Ranking
- Trump's 'stop
- Can Illinois Handle a 2000% Jump in Solar Capacity? We’re About to Find Out.
- What’s Behind Big Oil’s Promises of Emissions Cuts? Lots of Wiggle Room.
- Orlando officer fatally shoots man who made quick movement during traffic stop
- What do we know about the mysterious drones reported flying over New Jersey?
- Blake Shelton Finally Congratulates The Voice's Niall Horan in the Most Classic Blake Shelton Way
- Warming Trends: A Climate Win in Austin, the Demise of Butterflies and the Threat of Food Pollution
- NASCAR contractor electrocuted to death while setting up course for Chicago Street Race
Recommendation
Cincinnati Bengals quarterback Joe Burrow owns a $3 million Batmobile Tumbler
Pink’s Daughter Willow Singing With Her Onstage Is True Love
Lady Gaga Will Give You a Million Reasons to Love Her Makeup-Free Selfies
These On-Sale Amazon Shorts Have 12,000+ 5-Star Ratings— & Reviewers Say They're So Comfortable
What to know about Tuesday’s US House primaries to replace Matt Gaetz and Mike Waltz
IRS warns of new tax refund scam
2020: A Year of Pipeline Court Fights, with One Lawsuit Headed to the Supreme Court
Judge Orders Dakota Access Pipeline Spill Response Plan, with Tribe’s Input