3 ms·
I would say first thing is to disable Windows Explorer from hiding the extension of files. From what I understand, it was an executable inside a zip attachment
by Renaud 4y ago
I would say first thing is to disable Windows Explorer from hiding the extension of files.
From what I understand, it was an executable inside a zip attachment to an email disguising itself as a partnership proposal from a reputable source.
The file inside the zip probably had a .pdf.exe extension. By default, Windows Explorer would show it as a .pdf, making it easy to run by mistake.
- richardjam73 4y agoThat should be stopped by the smartscreen prompt which is pretty hard to bypass by accident.
- andreareina 4y agoWait it wasn't an executable pdf that escaped the sandbox, it was a *.pdf.exe?? Why does Windows even still have this vulnerability?