cognitive cybersecurity intelligence

News and Analysis

Search

Microsoft Disables MS-app Installer Protocol

Microsoft has again deactivated the MSIX MS-app installer after numerous threat organizations reportedly used it to spread malware via the Windows AppX Installer vulnerability. Attackers used this flaw to maneuver past security measures like the Defender SmartScreen and browser alerts. Among the hacking groups reported is Sangria Tempest, a group linked with notorious ransomware operations. Microsoft had previously disabled the MS-app installer in February 2022 after an attack by the Emotet hacker group.

Source: thecyberexpress.com –

Subscribe to newsletter

Subscribe to HEAL Security Dispatch for the latest healthcare cybersecurity news and analysis.

More Posts