Shulou(Shulou.com)11/24 Report--

CTOnews.com, March 14 (Xinhua)-- Microsoft plans to release OneNote updates in April this year to improve its product's protection against "known high-risk" phishing attacks, according to the Microsoft roadmap.

Microsoft introduced this feature because TrustWave reported such phishing tools in January this year. CTOnews.com learned from reports that attackers launched phishing attacks by distributing emails using OneNote's native .one file format.

Users who open the OneNote attachment will see a blurry thumbnail and a "View document" button. Clicking this button launches a security prompt warning users that opening attachments may damage your computer and data. The user who clicks the OK button executes a WSF file in OneNote.

WSF,Windows script file, used by the Microsoft Windows script host. If the user ignores the security warning, the WSF file embedded in OneNote runs the PowerShell command to download and execute the file from Internet.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.