'Microsoft XL' file when trap

Experts advised to be careful before opening an XL file in the mail.

Microsoft's Office has advised users to stay alert about new malware attacks on Windows PCs. Windows software may be infected with the macro function of Office software. Microsoft's experts say a new malware program is back again. It follows the process of complex attack chain. Files like Microsoft Excel have been downloaded to the computer, and the terrible FlavyAdAmmy RAT malware is directly infected with memory.

Experts say the whole process begins with e-mail. This malware is activated since the contents of the e-mailed dot xls attachment are downloaded. That content is written in Korean language. Adding malicious macro functions to Excel attachments, the miscreants attack the Windows PC. Initially, the attacks were targeted by Korean users.

According to the information provided by the cyber security firm ProPoint, a group called TA 505 attacked. Earlier, the group attacked this type of attack. But this time the company has added some additional strategies to e-mail.

Microsoft has been advised not to click on such harmful attachments. If you open this type of file, the macro function starts automatically and msiexec. Launches a file named exe, which converts the download into MSI archive. The MSI archive has a digital sign-up eXI file, which is to launch another eXI file in memory. In this process wsus. The exe file is downloaded, which can run Microsoft's official Windows service update. Flavoydamy ram malware enters into the computer system.

Cyber ​​security experts caution, be careful to open e-mail attachments from unknown sources. Earlier this kind of attack came in the Word file. Whether it is Ward or Excel, it's not fair to open but not sure. Cyberbullying may spoil you by mailing fraud and temptation.