1300 551 486

Blog

Microsoft Stopped Hackers Using GIFs To Access User Data

Share on facebook
Share
Share on twitter
Tweet
Share on linkedin
Share

Microsoft Teams (which is the company’s Enterprise chat app) isn’t all business.

Like most other chat apps, it allows those who use it to send amusing animated Gif images.

Unfortunately, that proved to be problematic.

Recently, researchers from CyberArk discovered a serious security issue with Teams that allowed hackers to exploit the Gif function to compromise a user’s account and steal data. To exploit the flaw, hackers could simply compromise the subdomain serving up a poisoned Gif image. Then, simply by viewing the image, the hackers could gain access.

CyberArk notified Microsoft of the existence of the flaw on March 23rd, 2020, and the company moved quickly to patch the issue. So if you use Teams, know that there’s nothing you have to do beyond making sure your system is updated and you’re using the latest version of the app.

While it’s true that compromising a subdomain to serve up poisoned Gifs isn’t a trivial undertaking, it’s certainly not a daunting challenge for an experienced hacker. Although, the researchers at CyberArk pointed out that its main use would be to select high value targets, as opposed to being a mainstream, widely utilized tactic.

Even so, kudos to the sharp-eyed researchers at CyberArk for catching the issue, and to Microsoft for moving so quickly to correct it. The insidious part about issues like these is that they’re virtually impossible to track or trace. There’s no footprint that gets left behind and users would likely never even know they had been targeted.

Unfortunately, given the dramatic rise in popularity of workplace collaboration tools like Microsoft Teams, they have become increasingly tempting targets. Hackers around the world are constantly probing their capabilities, looking for new ways to exploit them and gain advantage. Stay vigilant, it’s dangerous out there.

Used with permission from Article Aggregator

FREE BUSINESS GUIDE

 

Don’t even think about calling a computer consultant before you read this!

If you are a small to medium business owner looking for computer support, then it’s critical that you read this business guide about IT services: This Business Advisory Guide Will Arm You With 18 Revealing Questions You Should Ask Any Computer Consultant Before Giving Them Access To Your Company’s Network.

Important! We hate spam as much (or more!) than you and promise to NEVER rent, share, or abuse your e-mail address and contact information in any way.

“Be Your Own Best Defense Against Cybercrime”

Sign Me Up For The Free Assessment

Book My Brief 10-15 Minute Initial Consultation