Password-Protected Documents Used in Targeted Attacks

Cybercriminals came up with a new way to avoid email filters. They are relying on password-protected document files they attach to email messages with the purpose of encrypting them in order to make them more legitimate looking.

Symantec researchers found this latest technique utilized in a limited number of targeted attacks.

Spammers use the password feature mostly because it also encrypts a file, making it harder to detect by security products. Another reason for using protected documents is because reverse engineering becomes more difficult.

Word processors, spreadsheet and presentation programs, and basically any other software that has a password-protect feature is affected.

Users who encounter suspicious password protected documents attached to a spammy-looking email are advised to immediately delete them.

Also, it’s good to know that the password protection doesn’t mean that a security software can't neutralize the malware. The encryption only helps it evade detection in the initial phase.