cognitive cybersecurity intelligence

News and Analysis

Search

Microsoft disables MSIX protocol handler abused in malware attacks

Microsoft has once more deactivated its MSIX ms-appinstaller protocol after it was abused by threat groups to distribute malware into Windows systems. This follows exploitation of the CVE-2021-43890 Windows AppX Installer vulnerability, enabling evasion of protective measures like Defender SmartScreen. Threat actors employed malicious ads and phishing messages to push malware, with potential links to ransomware operations. Microsoft has advised installing a patched App Installer version to block exploitation attempts.

Source: www.bleepingcomputer.com –

Subscribe to newsletter

Subscribe to HEAL Security Dispatch for the latest healthcare cybersecurity news and analysis.

More Posts

A Better Connected Care Journey

The article urges healthcare organizations to move towards integrated, digitally enabled care delivery, replacing outdated point solutions. It acknowledges some may need help overcoming hurdles.