Current:Home > My'Criminals are preying on Windows users': Software subject of CISA, cybersecurity warnings -ProfitLogic
'Criminals are preying on Windows users': Software subject of CISA, cybersecurity warnings
View
Date:2025-04-14 05:05:59
The U.S. Cybersecurity and Infrastructure Security Agency added a vulnerability in Microsoft's Windows 10 software to a list of exploited security weak spots.
CISA said that "Microsoft COM for Windows contains a deserialization of untrusted data vulnerability that allows for privilege escalation and remote code execution," in a listing added to the agency's Known Exploited Vulnerability Catalog Monday.
The listing advised users to stop using software or utilize a patch through Windows.
CISA said that it did not know if the vulnerability, titled CVE-2018-0824, had been used in a ransomware campaign but a CISCO Talos report released Thursday said that a Chinese hacking group utilized the vulnerability in an attack on a Taiwanese government research center. The report said the center was, "likely compromised."
Second organization issues Windows warning
CISA was not the only organization to issue a warning to Windows users Monday.
"Criminals are preying on Windows users yet again, this time in an effort to hit them with a keylogger that can also steal credentials and take screenshots," enterprise technology news site the Register reported Monday.
The outlet reported that FortiGuard Labs, a threat intelligence agency, found an uptick in malware attacks with SnakeKeylogger. The malware is known to steal credentials and record keystrokes in infected machines.
It was originally sold on a subscription basis on Russian crime forums and became a major threat in 2020, according to the Register.
In 2022 Check Point Research, a cyber security firm, warned that the malware, "is usually spread through emails that include docx or xlsx attachments with malicious macros," and through PDF files.
The warnings come on the heels of the "Crowdstrike outage" in July, where a defective software update rendered devices using Windows software useless for hours.
veryGood! (16)
Related
- 'Vanderpump Rules' star DJ James Kennedy arrested on domestic violence charges
- A Lyle Lovett band member spotted a noose in Montana. Police are investigating it as hate crime
- Novelist Russell Banks, dead at age 82, found the mythical in marginal lives
- Doug Burgum says he qualified for GOP presidential debate, after paying donors $20 for $1 donations
- Behind on your annual reading goal? Books under 200 pages to read before 2024 ends
- National monument honoring Emmett Till to consist of 3 sites in Illinois and Mississippi
- What's making us happy: A guide to your weekend reading and viewing.
- Novelist Russell Banks, dead at age 82, found the mythical in marginal lives
- Toyota to invest $922 million to build a new paint facility at its Kentucky complex
- Snoop Dogg brings his NFT into real life with new ice cream line available in select Walmart stores
Ranking
- Romantasy reigns on spicy BookTok: Recommendations from the internet’s favorite genre
- LeBron James' 18-Year-Old Son Bronny James Suffers Cardiac Arrest During Workout at USC
- Hugh Carter Jr., the cousin who helped organize Jimmy Carter’s ‘Peanut Brigade,’ has died
- We've got a complicated appreciation for 'Roald Dahl's Matilda The Musical'
- Which apps offer encrypted messaging? How to switch and what to know after feds’ warning
- Chase Chrisley and Fiancée Emmy Medders Break Up 9 Months After Engagement
- A maternity ward in Oregon is the scene of fatal gunfire
- Aaron Hernandez's brother Dennis arrested for allegedly planning shootings at UConn, Brown
Recommendation
Stamford Road collision sends motorcyclist flying; driver arrested
Report: Kentucky crime statistics undercounted 2022 homicides in the state’s most populous county
Could sharks make good hurricane hunters? Why scientists say they can help with forecasts
Ammon Bundy ordered to pay $50 million. But will the hospital ever see the money?
Gen. Mark Milley's security detail and security clearance revoked, Pentagon says
How to share your favorites with loved ones — and have everyone go home happy
Tory Lanez is guilty, so why was Megan Thee Stallion's strength on trial?
TikTok adds new text post feature to app. Here's where to find it.