Posts tagged untitled

Page Content

Word documents being used in new attacks

Wednesday, December 17, 2008 by spaf in Kudos, Opinions and Rants, Secure IT Practices
Share:

I have repeatedly pointed out (e.g., this post) to people that sending Word files as attachments is a bad idea. This has been used many, many times to circulate viruses, worms, and more. People continue to push back because (basically) it is convenient for them. How often have we heard that convenience trumps good security (and good sense)?

Now comes this story of yet another attack being spread with Word documents.

There are multiple reasons why I don’t accept Word documents in email. This is simply one of the better reasons.

If you want to establish a sound security posture at your organization, one of the things you should mandate is no circulation of executable formats—either out or in. “.doc” files are in this category. I am unsure if the new “.docx” format is fully immune to these kinds of things but it seems “.rtf” is.

 

Tags: security, vulnerabilities, word, policy, malware, viruses, attacks, untitled

Post a comment (4 so far) »