Just hovering over a link in PowerPoint can now infect your system with malware

Most often, you need to actually click on a link or run a program in order to get infected with a virus or other malware. Sometimes, however, black hat hackers figure out a way to infect a machine without the user doing anything at all.

That is the case with a new PowerPoint malware, which was discovered security company Trend Micro. This particular attack merely needs users to hover over a link with their mice in order to install a banking Trojan that has remote access, network traffic monitoring, information access, and other nefarious capabilities.

The Trojan is delivered to users in a spam email with a PowerPoint Show (PPS) or Open EML Slide Show (PPSX) file attached. These files are different from the usual PowerPoint files (PPT and PPTX) in that they can not be edited and they only open in presentation or slideshow modes.

Malicious links are embedded in the PowerPoint slides that use the mouseover action to execute code that seeks to install the Trojan. For users with Protected View turned on in later versions of Microsoft Office, a security prompt pops up that the user must click through in order to enable the installation. As usual, users should never click “Enable” in such dialog boxes unless they are absolutely certain of what is actually going to run. Needless to say, clicking “Enable All” almost universally a bad idea.

Trend Micro
Trend Micro

On older versions of Office, however, or those without Protected View turned on, then the installation proceeds without any notice to the user or need for anything to be actively enabled. That makes this particular piece of malware particularly insidious and difficult to protect against. Note that Office 365’s web mode and PowerPoint Online are not affected by the attack.

The lesson here, first, is to make sure that Protected View is turned on in your Office applications. You can check on this by going to File, then Options, then Trust Center then click on the Trust Center Settings button. There, you want to select Protected View and make sure all of the options are checked. You can also look at your Macro settings while you are there and turn those off unless you’re sure you need them — Office Macros are another vector of attack.

Mark Coppock/Digital Trends
Mark Coppock/Digital Trends

It is bad enough that our machines can be infected by hackers who trick us into clicking on links and running programs. The fact that we can get infected without doing anything at all is even worse — and means we need to be even more vigilant in ensuring that all of the various security features for our software and hardware are turned on and properly updated.

Product Review

Fire TV Stick is the perfect torch for exploring Amazon's cavern of content

Amazon is giving Roku a run for its money with the Fire TV Stick, a $40 device about the size of a pack of gum that grants 1080p HD access to a wide array of content and games. If you’re an Amazon Prime member already, this is a…

People are buying 5G phones when they don’t even have 5G

5G promises to change entire industries forever. Despite a slow rollout, people are buying 5G smartphones even when they can't access 5G networks, according to a new report from Counterpoint Research.
Movies & TV

The Star Trek: Picard TV series: Everything we know

Star Trek: Picard will feature the return of Patrick Stewart as Jean-Luc Picard and will premiere near the end of 2019 on the CBS All Access streaming service. Here's everything we know about the series so far.

The improved TicWatch Pro has 4G LTE connectivity and activity detection capabilities

Mobvoi may not be a household name in the U.S., but it sells affordable smartwatches running Google's Wear OS platform. The firm's next watch has been revealed, and the new TicWatch Pro 4G/LTE comes with full 4G access.

Will the Surface Pro 7 ditch Intel chips for Qualcomm’s 5G support?

Microsoft might announce a new Surface Pro 7 towards the end of this year and according to new rumors, it might do with a new chip under the hood. Not an Intel chip though, but one from AMD, or even Qualcomm.

You can get a 2018 MacBook Air for just $999 with this latest deal from B&H

Other retailers like B&H are offering their own sweet laptop deals during Prime Day 2019. In fact, you can score a 13-inch 2018 MacBook Air with a Retina display at a $100 discount from B&H right now.

Amazon Prime Day discounts makes upgrading to RTX graphics even more affordable

Looking to upgrade your graphics card? Today may be the day to do it, thanks to Amazon's Prime Day shopping event. Amazon is offering Prime members steep discounts off of GeForce RTX 2080 Ti, RTX 2080, or RTX 2070 graphics.

Upgrade your gaming rig with our favorite graphics cards for every budget

If you're serious about games, a good graphics card is essential. There’s no one-size-fits-all option for graphics cards, but our recommendations can help you pick from the best graphics cards for your needs.

AMD or Intel? We take a look at the pros and cons of both processors

When it comes to selecting a CPU for your PC, there's no shortage of chips for you to choose from. With Ryzen, Threadripper, and Core i9 CPUs though, the AMD vs. Intel argument is muddier than ever.

The best mouse deals for Prime Day 2019: Razer, Logitech, and more

This year's big shopping event, Amazon Prime Day, offers some fantastic discounts on mice. We've scoured this year's sales and made picks for what we think are the best mice you can buy on Prime Day.

Keep your portable computer safe and shiny with the best laptop bags for 2019

Choosing the right laptop bag is no easy feat -- after all, no one likes to second-guess themselves. Here are some of the best laptop bags on the market, from backpacks to sleeves, so you can get it right the first time around.

Amazon Prime Day deal slashes $200 off of this MacBook Pro

Amazon’s Prime Day deals have extended to Apple’s MacBook Pro, with deep discounts galore. You can save $200 on a 2018 MacBook Pro, making it a superb bargain if you’re in the market for a MacBook.

Walmart Prime Day sale: 4K TV, Apple Watch, and Nintendo Switch Deals

The Walmart Prime Day sale continues to go strong as the first day of Amazon's 48-hour deals event comes to a close. There are loads of great Apple Watch, Nintendo Switch, and 4K TV deals going on right now.

Don't pay for that app! These top-notch screen recorders are absolutely free

Our list of the best free screen recorders showcases some of the top apps for capturing video on your computer - without paying for the feature. Whether you're in a business or on your own, take a look at the these options.