Skip to content
NewA calmer, faster ZeroHour
Malwarecritical

Microsoft temporarily disables MSIX protocol handler following malware abuse

The Record ()3 min read3 · 1 read
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2021-43890
Spoofing Vulnerability in Microsoft Windows AppX Installer Actively Exploited
7.111%KEVRansomwarePoC
KEV

From the original article

3 min read at therecord.media

Microsoft has temporarily disabled the MSIX protocol handler in Windows installations after the Emotet gang has abused it over the past three months to deploy malware on user systems. The OS maker said it is working on ways to better protect this feature from future abuse but did not say when it expects to re-enable it back on.

The Record

therecord.media

Read the full article at The Record

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.