New Windows Malware Exploits Google Docs
New Windows Malware Exploits Google Docs
A new type of malware targeting Microsoft's new Windows 8 operating system (OS) reportedly uses Google Docs to carry out its attacks on unsuspecting users.
According to a report from security firm Symantec (which discussed the issue in one of its recent Security Response blogs), a Trojan horse known as Backdoor.Makadocs is targeting Windows 8 users.
Malware Disguises Itself; Tricks Users
Here's how it works, according to Symantec: the malware exploits a vulnerability in the Google Docs program called "Viewer."
Apparently the malware masks itself as a Rich Text Format (RTF) or Microsoft Word (DOC) document. This allows it to trick users into opening the malicious file.
In addition, Symantec says, a unique encryption strategy is allowing the malware to bypass Google Docs' security methods, and also prevent users from detecting the malware's activity.
In effect, the malicious file uses Google Docs as a 'proxy server' to bypass Google's usual defense systems.
Symantec software engineer Takashi Katsuki believes that Google could stop this malware exploitation by introducing a firewall feature. Google says it is currently investigating the problem and will "take action when we become aware of abuse."
In a statement, the search giant warned that "using any Google product to conduct this kind of activity is a violation of our product policies." (Source: threatpost.com)
Earlier Versions of Windows Also Vulnerable
Some reports indicate that Windows 8 is just one of the Microsoft operating systems vulnerable to this exploit. The Hot Hardware blog has suggested the problem affects all versions of Windows, all the way back to Windows 95. (Source: hothardware.com)
Windows Server 2003, 2008, and 2012 are also reportedly open to this security hazard.
Right now it appears this Trojan malware is primarily affecting Brazilian users. However, it's entirely possible the infections will soon spread to other parts of the world.
Security experts are warning all Internet users to avoid opening any suspicious documents, particularly those from unknown sources. (Source: hothardware.com)

My name is Dennis Faas and I am a senior systems administrator and IT technical analyst specializing in cyber crimes (sextortion / blackmail / tech support scams) with over 30 years experience; I also run this website! If you need technical assistance , I can help. Click here to email me now; optionally, you can review my resume here. You can also read how I can fix your computer over the Internet (also includes user reviews).
We are BBB Accredited
We are BBB accredited (A+ rating), celebrating 21 years of excellence! Click to view our rating on the BBB.