PSA: Active zero-day Excel exploit

[unixronin]

Via Security Wire:

Attackers are actively exploiting a zero-day flaw in Microsoft Excel to infect and hijack targeted machines, the software giant warned in an advisory yesterday.  The only defense at this point is to avoid opening Excel files from untrusted sources.

Comments

[metahacker.livejournal.com]

avoid opening [...] files from untrusted sources.

Because, y'know, that's always a good idea.

Grr!

[unixronin.livejournal.com]

Yeah, that was my thought too. (Like, WTF, you're going to just blindly open a spreadsheet from someone claiming to be DR ABDULLAH NGAYO VICE PRESIDENT OF NIGERIAN BANKING COMMISSION?)

[metahacker.livejournal.com]

But it might have had hot stock tips in it!

As the local police chief says, "we don't catch the *smart* ones..."