Microsoft vulnerability can strike before users open ‘malicious’ email: CSE centre
The Canadian Centre for Cyber Security is warning about a significant vulnerability impacting Microsoft email users that allows threat actors to steal victims’ identities.
The alert sent out Wednesday says the advisory from Microsoft was one of “several critical vulnerabilities” published by the company the day before. “We are flagging this alert this evening due to the seriousness of the vulnerability,” a spokesperson for the Cyber Centre said in an email to Global News Wednesday.
The advisory in question, dubbed CVE-2023-23397 by Microsoft, disclosed a zero-day vulnerability found in an email crafted by threat actors that contains a malicious payload, the agency said.
Read more: Why are there so many cyberattacks lately? An explainer on the rising trend That payload will cause the victim’s Outlook email client to automatically connect to a universal naming convention agent controlled by the actor who will then receive the user’s password hash, which contains login credentials.
United States
|
Cases: 46 252 513
Deaths: 750 423
Recovered: 0
|
India
|
Cases: 34 321 025
Deaths: 459 652
Recovered: 0
|
Brazil
|
Cases: 21 835 785
Deaths: 608 235
Recovered: 0
|
United Kingdom
|
Cases: 9 215 683
Deaths: 141 607
Recovered: 0
|
Russia
|
Cases: 8 494 589
Deaths: 237 619
Recovered: 0
|