According to the Israel-based cyber security firm Votiro<\/a>, when a user attaches an online video, a webVideoPr element of type CT_WebVideoPr, which supports embedded HTML code is loaded in the document. As only basic security checks are being adopted, the loaded HTML code poses huge security risks.<\/p>\nIn case of browser and YouTube video based crypto currency mining, the JavaScript will run only when a user keeps the corresponding video frame open. Internet Explorer is not updated frequently (compared to Chrome and FireFox) and is the prime target of hackers for hijacking the CPU of a user for crypto currency mining.<\/p>\n
Now, hackers have taken it to the next level by gaining full control of the machines. A word document with a malicious code is delivered through spam and the interesting topic will lure the user to click the video by disabling the \u2018protected view.\u2019 Without the knowledge of the user, the IE frame would redirect the user to the exploit-kit (a malicious toolkit used to exploit security holes found in software applications for the purpose of spreading malware. If exploit succeeds, a malware program is downloaded to the victim’s computer and executed) gate, which would evaluate and infect the machine, if conditions are suitable for exploitation.<\/p>\n
The process defeats Windows Defender Exploit Guard as the exploitation is done as a separate process. Therefore, the program can be installed even on an updated Windows 10 machine. The \u2018online video\u2019 feature is available in Power Point as well. However, Power Point does not allow injection of HTML code.<\/p>\n","protected":false},"excerpt":{"rendered":"
Crypto currency mining with JavaScript loaded through a browser has become a major concern for users who are not tech savvy. Newer methods are being employed regularly by hackers to gain control over a user\u2019s machine. While injecting crypto currency mining programs through YouTube videos and advertisements are quite common, hackers are now exploiting the […]<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[68,1],"tags":[],"class_list":["post-5167","post","type-post","status-publish","format-standard","hentry","category-cryptocurrency","category-usa"],"yoast_head":"\n
How Hackers Abuse Microsoft Word for Crypto mining?<\/title>\n<meta name=\"description\" content=\"While injecting crypto currency mining programs through YouTube videos and advertisements are quite common, hackers are now exploiting the \u2018online video\u2019 feature provided by Microsoft Word.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.legitgambling.com\/news\/how-hackers-abuse-microsoft-word-for-crypto-mining\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How Hackers Abuse Microsoft Word for Crypto mining?\" \/>\n<meta property=\"og:description\" content=\"While injecting crypto currency mining programs through YouTube videos and advertisements are quite common, hackers are now exploiting the \u2018online video\u2019 feature provided by Microsoft Word.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.legitgambling.com\/news\/how-hackers-abuse-microsoft-word-for-crypto-mining\/\" \/>\n<meta property=\"article:published_time\" content=\"2018-02-23T05:38:01+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2018-02-23T05:40:17+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.legitgambling.com\/news\/wp-content\/uploads\/2018\/01\/microsoft.jpg\" \/>\n<meta name=\"author\" content=\"Cameron Bishop\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Cameron Bishop\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/how-hackers-abuse-microsoft-word-for-crypto-mining\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/how-hackers-abuse-microsoft-word-for-crypto-mining\\\/\"},\"author\":{\"name\":\"Cameron Bishop\",\"@id\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/#\\\/schema\\\/person\\\/0e2e077765174748afc2362c890e3f91\"},\"headline\":\"How Hackers Abuse Microsoft Word for Crypto mining?\",\"datePublished\":\"2018-02-23T05:38:01+00:00\",\"dateModified\":\"2018-02-23T05:40:17+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/how-hackers-abuse-microsoft-word-for-crypto-mining\\\/\"},\"wordCount\":364,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/how-hackers-abuse-microsoft-word-for-crypto-mining\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/wp-content\\\/uploads\\\/2018\\\/01\\\/microsoft.jpg\",\"articleSection\":[\"Cryptocurrency\",\"USA\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/how-hackers-abuse-microsoft-word-for-crypto-mining\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/how-hackers-abuse-microsoft-word-for-crypto-mining\\\/\",\"url\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/how-hackers-abuse-microsoft-word-for-crypto-mining\\\/\",\"name\":\"How Hackers Abuse Microsoft Word for Crypto mining?\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/how-hackers-abuse-microsoft-word-for-crypto-mining\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/how-hackers-abuse-microsoft-word-for-crypto-mining\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/wp-content\\\/uploads\\\/2018\\\/01\\\/microsoft.jpg\",\"datePublished\":\"2018-02-23T05:38:01+00:00\",\"dateModified\":\"2018-02-23T05:40:17+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/#\\\/schema\\\/person\\\/0e2e077765174748afc2362c890e3f91\"},\"description\":\"While injecting crypto currency mining programs through YouTube videos and advertisements are quite common, hackers are now exploiting the \u2018online video\u2019 feature provided by Microsoft Word.\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/how-hackers-abuse-microsoft-word-for-crypto-mining\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/how-hackers-abuse-microsoft-word-for-crypto-mining\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/wp-content\\\/uploads\\\/2018\\\/01\\\/microsoft.jpg\",\"contentUrl\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/wp-content\\\/uploads\\\/2018\\\/01\\\/microsoft.jpg\",\"width\":380,\"height\":250},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/#website\",\"url\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/\",\"name\":\"\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/#\\\/schema\\\/person\\\/0e2e077765174748afc2362c890e3f91\",\"name\":\"Cameron Bishop\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f635e871248df28d6828ec38af2b48c04796e65e714639cfa0c2d3d1c91b0bc7?s=96&d=monsterid&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f635e871248df28d6828ec38af2b48c04796e65e714639cfa0c2d3d1c91b0bc7?s=96&d=monsterid&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f635e871248df28d6828ec38af2b48c04796e65e714639cfa0c2d3d1c91b0bc7?s=96&d=monsterid&r=g\",\"caption\":\"Cameron Bishop\"},\"description\":\"Cameron works tirelessly behind the scenes ensuring his many US news stories are factual, informative and brought to you in a timely fashion before most other media outlets have them. He is an investigative journalist at heart who also has a fond interest in the money and business markets too.\",\"url\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/author\\\/cameron-bishop\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How Hackers Abuse Microsoft Word for Crypto mining?","description":"While injecting crypto currency mining programs through YouTube videos and advertisements are quite common, hackers are now exploiting the \u2018online video\u2019 feature provided by Microsoft Word.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.legitgambling.com\/news\/how-hackers-abuse-microsoft-word-for-crypto-mining\/","og_locale":"en_US","og_type":"article","og_title":"How Hackers Abuse Microsoft Word for Crypto mining?","og_description":"While injecting crypto currency mining programs through YouTube videos and advertisements are quite common, hackers are now exploiting the \u2018online video\u2019 feature provided by Microsoft Word.","og_url":"https:\/\/www.legitgambling.com\/news\/how-hackers-abuse-microsoft-word-for-crypto-mining\/","article_published_time":"2018-02-23T05:38:01+00:00","article_modified_time":"2018-02-23T05:40:17+00:00","og_image":[{"url":"https:\/\/www.legitgambling.com\/news\/wp-content\/uploads\/2018\/01\/microsoft.jpg","type":"","width":"","height":""}],"author":"Cameron Bishop","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Cameron Bishop","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.legitgambling.com\/news\/how-hackers-abuse-microsoft-word-for-crypto-mining\/#article","isPartOf":{"@id":"https:\/\/www.legitgambling.com\/news\/how-hackers-abuse-microsoft-word-for-crypto-mining\/"},"author":{"name":"Cameron Bishop","@id":"https:\/\/www.legitgambling.com\/news\/#\/schema\/person\/0e2e077765174748afc2362c890e3f91"},"headline":"How Hackers Abuse Microsoft Word for Crypto mining?","datePublished":"2018-02-23T05:38:01+00:00","dateModified":"2018-02-23T05:40:17+00:00","mainEntityOfPage":{"@id":"https:\/\/www.legitgambling.com\/news\/how-hackers-abuse-microsoft-word-for-crypto-mining\/"},"wordCount":364,"commentCount":0,"image":{"@id":"https:\/\/www.legitgambling.com\/news\/how-hackers-abuse-microsoft-word-for-crypto-mining\/#primaryimage"},"thumbnailUrl":"https:\/\/www.legitgambling.com\/news\/wp-content\/uploads\/2018\/01\/microsoft.jpg","articleSection":["Cryptocurrency","USA"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.legitgambling.com\/news\/how-hackers-abuse-microsoft-word-for-crypto-mining\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.legitgambling.com\/news\/how-hackers-abuse-microsoft-word-for-crypto-mining\/","url":"https:\/\/www.legitgambling.com\/news\/how-hackers-abuse-microsoft-word-for-crypto-mining\/","name":"How Hackers Abuse Microsoft Word for Crypto mining?","isPartOf":{"@id":"https:\/\/www.legitgambling.com\/news\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.legitgambling.com\/news\/how-hackers-abuse-microsoft-word-for-crypto-mining\/#primaryimage"},"image":{"@id":"https:\/\/www.legitgambling.com\/news\/how-hackers-abuse-microsoft-word-for-crypto-mining\/#primaryimage"},"thumbnailUrl":"https:\/\/www.legitgambling.com\/news\/wp-content\/uploads\/2018\/01\/microsoft.jpg","datePublished":"2018-02-23T05:38:01+00:00","dateModified":"2018-02-23T05:40:17+00:00","author":{"@id":"https:\/\/www.legitgambling.com\/news\/#\/schema\/person\/0e2e077765174748afc2362c890e3f91"},"description":"While injecting crypto currency mining programs through YouTube videos and advertisements are quite common, hackers are now exploiting the \u2018online video\u2019 feature provided by Microsoft Word.","inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.legitgambling.com\/news\/how-hackers-abuse-microsoft-word-for-crypto-mining\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.legitgambling.com\/news\/how-hackers-abuse-microsoft-word-for-crypto-mining\/#primaryimage","url":"https:\/\/www.legitgambling.com\/news\/wp-content\/uploads\/2018\/01\/microsoft.jpg","contentUrl":"https:\/\/www.legitgambling.com\/news\/wp-content\/uploads\/2018\/01\/microsoft.jpg","width":380,"height":250},{"@type":"WebSite","@id":"https:\/\/www.legitgambling.com\/news\/#website","url":"https:\/\/www.legitgambling.com\/news\/","name":"","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.legitgambling.com\/news\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.legitgambling.com\/news\/#\/schema\/person\/0e2e077765174748afc2362c890e3f91","name":"Cameron Bishop","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/f635e871248df28d6828ec38af2b48c04796e65e714639cfa0c2d3d1c91b0bc7?s=96&d=monsterid&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/f635e871248df28d6828ec38af2b48c04796e65e714639cfa0c2d3d1c91b0bc7?s=96&d=monsterid&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f635e871248df28d6828ec38af2b48c04796e65e714639cfa0c2d3d1c91b0bc7?s=96&d=monsterid&r=g","caption":"Cameron Bishop"},"description":"Cameron works tirelessly behind the scenes ensuring his many US news stories are factual, informative and brought to you in a timely fashion before most other media outlets have them. He is an investigative journalist at heart who also has a fond interest in the money and business markets too.","url":"https:\/\/www.legitgambling.com\/news\/author\/cameron-bishop\/"}]}},"_links":{"self":[{"href":"https:\/\/www.legitgambling.com\/news\/wp-json\/wp\/v2\/posts\/5167","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.legitgambling.com\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.legitgambling.com\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.legitgambling.com\/news\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.legitgambling.com\/news\/wp-json\/wp\/v2\/comments?post=5167"}],"version-history":[{"count":0,"href":"https:\/\/www.legitgambling.com\/news\/wp-json\/wp\/v2\/posts\/5167\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.legitgambling.com\/news\/wp-json\/wp\/v2\/media?parent=5167"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.legitgambling.com\/news\/wp-json\/wp\/v2\/categories?post=5167"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.legitgambling.com\/news\/wp-json\/wp\/v2\/tags?post=5167"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}![\"\"](\"https:\/\/www.legitgambling.com\/news\/wp-content\/uploads\/2018\/01\/microsoft.jpg\")
Crypto currency mining with JavaScript loaded through a browser has become a major concern for users who are not tech savvy.<\/p>\n