tldrdaily.news logo

"Microsoft Shuts Down MSIX Protocol to Block Malware Exploits"

1 min read
Source: TechRadar
"Microsoft Shuts Down MSIX Protocol to Block Malware Exploits"
Photo: TechRadar
TL;DR Summary

Microsoft has taken action to disable the ms-appinstaller protocol handler by default due to its exploitation by hackers to deploy malware, including ransomware. The company observed four threat actors, including Storm-0569 and FIN7, using the handler to bypass security mechanisms and distribute malware through fake ads and phishing via Microsoft Teams. The handler is now disabled in App Installer version 1.21.3421.0 or higher to prevent further abuse. This follows previous incidents where MSIX files were used for malware distribution, highlighting ongoing cybersecurity challenges.

Topics:technology##cybersecurity#malware#microsoft#msix#ransomware#technology-and-cybersecurity
Share this article
  1. Microsoft disables one of its own software tools following multiple malware attacks  TechRadar
  2. Microsoft disables MSIX protocol handler abused in malware attacks  BleepingComputer
  3. Microsoft disables app installation protocol abused by hackers  The Record from Recorded Future News
  4. Microsoft Disables MSIX App Installer Protocol Widely Used in Malware Attacks  The Hacker News
  5. Microsoft disables MSIX protocol handler in Windows to thwart malware attacks  XDA Developers

Reading Insights

Total Reads

0

Unique Readers

0

Time Saved

2 min

vs 3 min read

Condensed

80%

422 → 83 words

Want the full story? Read the original article

Read on TechRadar