Naked Security: AKBuilder is the latest exploit kit to target Word documents, spread malware

Naked Security: AKBuilder is the latest exploit kit to target Word documents, spread malware. “AKBuilder generates malicious Word documents, all in Rich Text, according to the paper’s author, SophosLabs principal researcher Gábor Szappanos. Once purchased, malicious actors use it to package malware samples into booby-trapped documents they can then spam out. Like its two cousins, AKBuilder uses exploits to deliberately corrupt files that automatically trigger bugs in Office and underlying bugs in Windows itself.”

Ransomware Delivered Via Word Document Macro

This is why we can’t have nice things: there’s now ransomware that arrives via a Word document macro. “Several security researchers have discovered a new type of malware that jumps onto the ransomware bandwagon, encrypting victims’ files and then demanding a payment of half a bitcoin for the key. Named ‘Locky,’ the malware depends on a rather low-tech installation method to take root in a user’s system: it arrives courtesy of a malicious macro in a Word document.”