Cybersecurity experts are on high alert after finding a sneaky new computer bug. This bug, called malware, steals information and uses a popular email program, Microsoft Outlook, to communicate with the bad guys who made it. The malware sneaks into computers by pretending to be something it’s not, and it can even trick security systems by hiding the fact that it’s stealing passwords.
The people who discovered this malware, from a company called Elastic Security, noticed that it was being used to spy on a government in South America and possibly some places in Southeast Asia. It looks like the bad guys behind it are trying to find out secrets from these places.
These bad guys use common computer tools in ways they’re not supposed to, and that’s how they move around inside a computer network without being noticed. Once they’re in, they use special programs to download more tools to help them steal information. These programs can find out about the computer they’re on and send that information to the bad guys.
One of the tricky things they do is to use the Microsoft Graph API. This is a way for computer programs to talk to Microsoft’s cloud services. The malware can grab a special kind of password, a “token,” that it then uses to send stolen data through Outlook.
The good news is that the bad guys weren’t super careful. They made some mistakes that experts could spot. But still, experts say it’s essential for the people in charge of keeping computer networks safe, known as CISOs, to watch out for signs of this kind of attack.
There are ways to notice this malware, and Elastic Security experts have made some tools available on GitHub for other cybersecurity pros to use. These tools help spot the bad programs, whether they are trying to hide on Windows or Linux computers.
For anyone who’s not an expert, this might sound a little scary. How do you protect yourself or your company from something so sneaky? That’s where companies like Diversified Outlook Group come in. They are professionals who can help businesses stay safe from these cyber threats.
If you’re worried about keeping your computer information safe, Diversified Outlook Group has your back. They understand these complex cybersecurity problems and know what to do to keep bad guys out of your systems. You can reach them at support@diversifiedoutlookgroup.com for help or advice on protecting yourself from this new malware threat.
For more details on this malware, you can read the full report at www.csoonline.com/article/3826217/new-family-of-data-stealing-malware-leverages-microsoft-outlook.html.
